CVE-2026-15757

Full vulnerability record from the local CVENow database.

Description

A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send unauthorized commands to the device. This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.

Severity

MEDIUM

CVSS score

6.3 (v4.0)

Vulnerability status

Deferred

Source identifier

a2826606-91e7-4eb6-899e-8484bd4575d5

Published

2026-07-14 18:17:12.707000

Last modified

2026-10-24 21:10:00.130000

View original CVE JSON

{
  "id": "CVE-2026-15757",
  "sourceIdentifier": "a2826606-91e7-4eb6-899e-8484bd4575d5",
  "published": "2026-07-14T18:17:12.707",
  "lastModified": "2026-10-24T21:10:00.130",
  "vulnStatus": "Deferred",
  "cveTags": [
    {
      "sourceIdentifier": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "unsupported-when-assigned"
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A security flaw was discovered in the NETGEAR DGND3700v1 that could\nallow someone on the same local WiFi network to send unauthorized commands to\nthe device.\n\n\n\nThis issue was identified through testing in a controlled research\nenvironment using a simulated version of the router's software and has not been\nconfirmed on physical production devices."
    },
    {
      "lang": "es",
      "value": "Una falla de seguridad fue descubierta en el NETGEAR DGND3700v1 que podría permitir a alguien en la misma red WiFi local enviar comandos no autorizados al dispositivo.\n\nEste problema fue identificado mediante pruebas en un entorno de investigación controlado utilizando una versión simulada del software del router y no ha sido confirmado en dispositivos físicos de producción."
    }
  ],
  "affected": [
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "affectedData": [
        {
          "vendor": "NETGEAR",
          "product": "DGND3700v1",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThanOrEqual": "V1.0.0.17",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV40": [
      {
        "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "type": "Secondary",
        "cvssData": {
          "version": "4.0",
          "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber",
          "baseScore": 6.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "ADJACENT",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "HIGH",
          "vulnAvailabilityImpact": "HIGH",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "subAvailabilityImpact": "NONE",
          "exploitMaturity": "UNREPORTED",
          "confidentialityRequirement": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "valueDensity": "DIFFUSE",
          "vulnerabilityResponseEffort": "LOW",
          "providerUrgency": "AMBER"
        }
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-15T14:02:42.091535Z",
          "id": "CVE-2026-15757",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory",
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5"
    },
    {
      "url": "https://www.netgear.com/support/product/dgnd3700v1",
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5"
    }
  ]
}