Vulnerability · Published Jul 14, 2026 · Assigned by NETGEAR

CVE-2026-15757Insufficient input validation vulnerability in NETGEAR DGND3700v1 modem router

Medium 6.3

In plain English

A medium-severity improper input validation in DGND3700v1 from NETGEAR. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities).

Severity (CVSS 4.0)6.3Medium

Exploit odds (30 days)0.3%top 83.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send unauthorized commands to the device. This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.

Affected products (as reported)

Vendor	Product	Versions
NETGEAR	DGND3700v1	0 – through V1.0.0.17

Weakness: CWE-20 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber

References

https://www.netgear.com/support/product/dgnd3700v1 patch, product
https://kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory vendor-advisory