CVE-2026-0420
MEDIUM
4,6
Source: a2826606-91e7-4eb6-899e-8484bd4575d5
Attack Vector: network
Attack Complexity: high
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
Description
AI Translation Available
An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting the product's confidentiality. This vulnerability affects the listed NETGEAR models.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,0002
Percentile
0,1th
Updated
EPSS Score Trend (Last 6 Days)
325
Missing Cryptographic Step
DraftCommon Consequences
Security Scopes Affected:
Access Control
Confidentiality
Integrity
Accountability
Non-Repudiation
Potential Impacts:
Bypass Protection Mechanism
Read Application Data
Modify Application Data
Hide Activities
Applicable Platforms
All platforms may be affected
https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory
https://www.netgear.com/support/product/rax120v2/
https://www.netgear.com/support/product/rax35/
https://www.netgear.com/support/product/rax38/
https://www.netgear.com/support/product/rax40/