CVE-2026-15757

A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send unauthorized commands to the device. This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.

CVSS

No CVSS.

References

Link	Resource
https://kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory
https://www.netgear.com/support/product/dgnd3700v1

Configurations

No configuration.

History

24 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Una falla de seguridad fue descubierta en el NETGEAR DGND3700v1 que podría permitir a alguien en la misma red WiFi local enviar comandos no autorizados al dispositivo. Este problema fue identificado mediante pruebas en un entorno de investigación controlado utilizando una versión simulada del software del router y no ha sido confirmado en dispositivos físicos de producción.

Information

Published : 2026-07-14 18:17

Updated : 2026-10-24 21:10

NVD link : CVE-2026-15757

Mitre link : CVE-2026-15757

CVE.ORG link : CVE-2026-15757

JSON object : View

Products Affected

No product.

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2026-15757", "cveTags": [{"tags": ["unsupported-when-assigned"], "sourceIdentifier": "a2826606-91e7-4eb6-899e-8484bd4575d5"}], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-15757", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-15T14:02:42.091535Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.3, "Automatable": "NOT_DEFINED", "attackVector": "ADJACENT", "baseSeverity": "MEDIUM", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber", "exploitMaturity": "UNREPORTED", "providerUrgency": "AMBER", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "LOW", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "affectedData": [{"vendor": "NETGEAR", "product": "DGND3700v1", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "V1.0.0.17"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-14T18:17:12.707", "references": [{"url": "https://kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory", "source": "a2826606-91e7-4eb6-899e-8484bd4575d5"}, {"url": "https://www.netgear.com/support/product/dgnd3700v1", "source": "a2826606-91e7-4eb6-899e-8484bd4575d5"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "A security flaw was discovered in the NETGEAR DGND3700v1 that could\nallow someone on the same local WiFi network to send unauthorized commands to\nthe device.\n\n\n\nThis issue was identified through testing in a controlled research\nenvironment using a simulated version of the router's software and has not been\nconfirmed on physical production devices."}, {"lang": "es", "value": "Una falla de seguridad fue descubierta en el NETGEAR DGND3700v1 que podr\u00eda permitir a alguien en la misma red WiFi local enviar comandos no autorizados al dispositivo.\n\nEste problema fue identificado mediante pruebas en un entorno de investigaci\u00f3n controlado utilizando una versi\u00f3n simulada del software del router y no ha sido confirmado en dispositivos f\u00edsicos de producci\u00f3n."}], "lastModified": "2026-10-24T21:10:00.130", "sourceIdentifier": "a2826606-91e7-4eb6-899e-8484bd4575d5"}