CVE-2016-11014

PoC ×5—

CVSS 3.1

9.8 critical

EPSS

3%p84

Published

Oct 16, 2019 (Oct 16, 2019)

Modified

Jun 17, 2026

Description

NETGEAR JNR1010 devices before 1.0.0.32 have Incorrect Access Control because the ok value of the auth cookie is a special case.

Vendors: netgear
Products: jnr1010 firmware
Weakness: CWE-613
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.5%)

In the news0 stories

No ingested article mentions this CVE yet.