CVE-2026-11730 Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models
A network-adjacent attacker can predict session IDs to hijack administrator sessions on NETGEAR EX Series extenders.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-11730?
CVE-2026-11730 is a low-severity authentication bypass vulnerability in NETGEAR EX3700, published on 13 Oct 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal.
Weakness: CWE-335
Which versions are affected by CVE-2026-11730?
How do I fix CVE-2026-11730?
No fix has been published for CVE-2026-11730 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-11730 being exploited?
There is no known exploitation of CVE-2026-11730 in the wild and no public exploit code.
Sources
Also known as GHSA-4634-w7xm-gm3m.