CVE-2026-0420
NoneCVSS
—
EPSS
0.1%
Published
Jun 9, 2026
CISA due date
—
The record
An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting the product's confidentiality. This vulnerability affects the listed NETGEAR models.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-25250 EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic… CWE-325
- CVE-2026-76784 Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections… CWE-325
- CVE-2026-58638 Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass… CWE-325
- CVE-2026-55144 Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform… CWE-325
- CVE-2026-6458 Missing cryptographic step in Caliptra Core Firmware (aes_256_gcm_update module) results… CWE-325
- CVE-2026-49440 Deno is a JavaScript, TypeScript, and WebAssembly runtime. CWE-325
- GHSA-9xg4-qhm4-g43w Deno: Miller-Rabin Primality Test Allows Zero Rounds CWE-325
- CVE-2026-9266 A Missing Required Cryptographic Step vulnerability has been identified in Moxa's… CWE-325