{"id":"CVE-2020-26919","published":"2020-10-09T07:15:17Z","modified":"2026-06-17T03:08:32Z","title":"Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability","vendor":"NETGEAR","product":"JGS516PE Devices","tier":"core","eol":null,"description":{"text":"NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.","provenance":"source","from":"NVD"},"summary":{"text":"The Netgear JGS516PE devices contain a missing function-level access control flaw in their firmware, affecting versions before 2.6.0.43. An attacker who can reach the device over the network can invoke restricted functions without the required authorization, requiring no credentials, no user interaction, and no special configuration.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:12:02Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.57468,"percentile":0.9908,"date":"2026-10-31","provenance":"source"},"kev":{"dateAdded":"2021-11-03","dueDate":"2022-05-03","ransomware":false,"requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-26919","provenance":"source"},"vulncheckKev":{"dateAdded":"2021-03-15","exploitedFirstSeen":"2021-03-15","ransomware":false,"evidence":[{"url":"https://unit42.paloaltonetworks.com/mirai-variant-iot-vulnerabilities/","date":"2021-03-15"},{"url":"https://unit42.paloaltonetworks.com/network-attack-trends-february-april-2021/","date":"2021-06-01"},{"url":"https://www.radware.com/getmedia/18d24c2d-c092-4a61-9ad6-ebb92b7a49b8/Alert_Realtek_SDK.aspx","date":"2021-08-24"},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","date":"2021-11-03"},{"url":"https://eclypsium.com/blog/vulnerabilities-in-netgear-firmware-based-iot-devices-in-the-enterprise/","date":"2025-07-16"},{"url":"https://www.hkcert.org/security-bulletin/multiple-vulnerabilities-in-internet-facing-systems-targeting-hong-kong-s-education-sector_20260724","date":"2026-07-24"}],"evidenceTotal":6,"provenance":"source"},"exploited":true,"otx":null,"cwes":[],"references":[{"url":"https://kb.netgear.com/000062334/Security-Advisory-for-Missing-Function-Level-Access-Control-on-JGS516PE-PSV-2020-0377","tags":["Vendor Advisory"]},{"url":"https://kb.netgear.com/000062334/Security-Advisory-for-Missing-Function-Level-Access-Control-on-JGS516PE-PSV-2020-0377","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-26919","tags":["US Government Resource"]}],"techniques":[{"id":"T1190","name":"Exploit Public-Facing Application","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: unauthenticated network access to exposed device functions","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"lack of access control at the function level","start":57,"end":101}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1098","name":"Account Manipulation","tactics":["persistence","privilege-escalation"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: unauthorized functions could alter device account configuration","mappingType":"primary_impact","evidence":[{"from":"description","quote":"lack of access control at the function level","start":57,"end":101}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2020-19449","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-19449","exploited":true,"exploitedSince":"2021-11-03","provenance":"source"},"exploits":[],"exploitSources":{"nuclei":[{"id":"CVE-2020-26919","name":"NETGEAR ProSAFE Plus - Unauthenticated Remote Code Execution","severity":"critical","path":"http/cves/2020/CVE-2020-26919.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26919.yaml"}],"provenance":"source"},"exploitRefs":[],"flow":[{"stage":"exploitation","techniques":["T1190"],"provenance":"ai"},{"stage":"primary","techniques":["T1098"],"provenance":"ai"}],"timeline":[{"date":"2020-10-09","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-26919","provenance":"source"},{"date":"2021-03-15","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://unit42.paloaltonetworks.com/mirai-variant-iot-vulnerabilities/","provenance":"source"},{"date":"2021-11-03","kind":"kev","label":"Added to CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","provenance":"source"},{"date":"2021-11-03","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-19449","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":390},"priority":{"score":66.7,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in CISA KEV and VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 2057 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.82,"detail":"percentile 0.9908"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}