CVE-2026-15757

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 58/100
Published: 2026-07-14 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: X
AT: None
VC: High
VI: High
VA: High

Description

A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send unauthorized commands to the device. This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.

Weakness Classification (1)

Bug Bounty Relevance

58 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

6.3 / 10.0 v4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber

EPSS — Exploitation Probability

0.25%
Raw Score 0.002510
Percentile 16.5%
Date 2026-10-31

EPSS Trend

2026-10-31
0.00251
2026-10-30
0.00251
2026-10-29
0.00251
2026-10-28
0.00251

Intelligence Sources

nvd ref →