Threats Tagged 'cve-2026-24714'

CVE-2026-24714 is a high-severity vulnerability affecting certain end-of-service NETGEAR products that include an undocumented 'TelnetEnable' feature. This feature allows an attacker to activate the Telnet service remotely by sending a specific magic packet, without requiring authentication or user interaction. Exploiting this vulnerability can lead to a complete compromise of the device's integrity, as attackers may gain unauthorized remote access. The vulnerability has a CVSS score of 7.5, indicating a significant risk, especially since it requires no privileges or user interaction and can be exploited over the network. Although no known exploits are currently reported in the wild, the presence of this backdoor-like functionality poses a serious threat. European organizations using affected NETGEAR devices should prioritize mitigation to prevent potential unauthorized access and control. The countries most likely affected are those with high NETGEAR market penetration and critical infrastructure relying on these devices, such as Germany, France, and the UK. Immediate mitigation steps include disabling Telnet if possible, applying any available firmware updates, and segmenting vulnerable devices from critical networks.

HighVulnerabilityGermanyFranceItaly+3#cve#cve-2026-24714