Is CVE-2026-15757 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-15757 being exploited in the wild.

How severe is CVE-2026-15757?

Informational severity, with a CVSS score of 6.3, published 14 July 2026.

Which products and versions are affected?

NETGEAR DGND3700v1 V1.0.0.17 and earlier.

Is there a fix for CVE-2026-15757?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-15757 attacked?

It is attacked from the adjacent network, in a network appliance.

Am I affected by CVE-2026-15757?

Check whether you run NETGEAR DGND3700v1 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-15757: NETGEAR DGND3700v1 improper input validation

CVE-2026-15757 · Severity: info · CVSS 6.3 · Published 2026-07-14

A security flaw in the NETGEAR DGND3700v1 router could allow an attacker on the same local WiFi network to send unauthorized commands to the device. This router is a consumer-grade gateway used to provide internet access and local networking. If exploited, an attacker could potentially gain control over the device, leading to unauthorized configuration changes or interception of network traffic.

Vendors: NETGEAR.

Quick answers

Is CVE-2026-15757 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-15757 being exploited in the wild.
How severe is CVE-2026-15757?: Informational severity, with a CVSS score of 6.3, published 14 July 2026.
Which products and versions are affected?: NETGEAR DGND3700v1 V1.0.0.17 and earlier.
Is there a fix for CVE-2026-15757?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-15757 attacked?: It is attacked from the adjacent network, in a network appliance.
Am I affected by CVE-2026-15757?: Check whether you run NETGEAR DGND3700v1 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An improper input validation vulnerability (CWE-20) exists in the NETGEAR DGND3700v1 router. The flaw allows an unauthenticated attacker located on the same adjacent network (WiFi) to issue unauthorized commands to the device. This issue was identified in a simulated research environment and has not been confirmed on physical hardware. Successful exploitation could lead to a total loss of confidentiality, integrity, and availability on the affected device. The vulnerability is present in firmware versions up to and including V1.0.0.17.

Affected products

NETGEAR DGND3700v1 V1.0.0.17 and earlier

Timeline

2026-07-14: advisory: NVD published the CVE record based on Netgear disclosure.

References

https://www.netgear.com/support/product/dgnd3700v1

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.