CVE-2026-35019

CRITICAL EPSS 34.5%
Published Jun 23, 20266d ago · Modified Jun 23, 20266d ago
9.2 CVSS 4.0
Critical
Find Similar
Published Jun 23, 2026 6d ago
Last Modified Jun 23, 2026 6d ago

Description

NetComm NF20MESH routers running firmware R6B031 and earlier contain an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by exploiting a hardcoded AES-256 key used to encrypt session cookies for the web management interface. Attackers can forge a valid encrypted session cookie using the shared hardcoded key and bypass authentication checks to obtain full administrative control of the management interface while any legitimate administrator session is active.

CVSS Details

Base Score
9.2
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
34.5% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-321

References 4

  • signal11.io https://signal11.io/advisories/netcomm-nf20-mesh-authentication-bypass
  • support.netcommwireless.com https://support.netcommwireless.com/api/Media/Firmware/4407c21d-e990-49a4-9754-b72475f20c76?Product=NF20MESH%20Release%20Notes.pdf
  • support.netcommwireless.com https://support.netcommwireless.com/products/nf20mesh#Firmware
  • vulncheck.com https://www.vulncheck.com/advisories/netcomm-nf20mesh-r6b032-hardcoded-aes-key-authentication-bypass

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.