This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR…
NETGEAR · Multiple Routers
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the mini_httpd service, which listens on TCP port 80 by default. When parsing the funjsq_access_token parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-11653.
- Exploited
- Yes, in VulnCheck KEV
- Reports
- 0
- Tactics
- 0/15
Exploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.
First seen exploited 5 years after disclosure.
- Disclosedday 0
- First seen exploitedVulnCheck KEV evidence+5 yrs
MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques
No techniques linkedNo ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.
What security researchers reported
Not named in any threat report yetAlso mentioned in 6 community threat pulses (AlienVault OTX)
Weaker evidencePulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.
- RondoDox | Guest System attacking | EuroTarget16 Jan 2026
- RondoDox v2: Evolution of RondoDox Botnet with 650% More Exploits10 Nov 2025
- From Targeting Pwn2Own Vulnerabilities to Shotgunning Exploits15 Oct 2025
- From Targeting Pwn2Own Vulnerabilities to Shotgunning Exploits14 Oct 2025
- RondoDox: From Targeting Pwn2Own Vulnerabilities to Shotgunning Exploits.10 Oct 2025
- From Targeting Pwn2Own Vulnerabilities to Shotgunning Exploits10 Oct 2025