CVE-2020-26919

Netgear JGS516PE devices lack function-level access controls, allowing unauthorized access to system functions.

The missing access control vulnerability in Netgear JGS516PE devices allows attackers to bypass intended security boundaries and execute arbitrary actions on the device. For DIB organizations, this represents a significant compliance risk as it violates the principle of least privilege and could lead to unauthorized network access or data exfiltration. Organizations must ensure all network hardware is patched and access controls are properly implemented to prevent such exploitable gaps.

Shame score — A missing access control vulnerability in a widely deployed consumer/enterprise router exposes the device to unauthorized manipulation, indicating a fundamental design or implementation flaw that was not mitigated by a patch before exploitation.