CVE-2026-0407

An insufficient authentication vulnerability in NETGEAR WiFi range
extenders allows a network adjacent attacker with WiFi authentication or
a physical Ethernet port connection to bypass the authentication
process and access the admin panel.

More information : https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory