What’s Vulnerable › Vulnerabilities

CVE-2020-26919: Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2021-11-03
• EPSS: 57.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-10-09 · updated 2026-06-17

Description

NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.

Affected products

• NETGEAR Jgs516Pe Firmware: before 2.6.0.43 — fixed in 2.6.0.43

How to fix

Upgrade to a fixed version: NETGEAR Jgs516Pe Firmware 2.6.0.43. Check the vendor advisory for mitigations.

References

• https://kb.netgear.com/000062334/Security-Advisory-for-Missing-Function-Level-Access-Control-on-JGS516PE-PSV-2020-0377
• https://kb.netgear.com/000062334/Security-Advisory-for-Missing-Function-Level-Access-Control-on-JGS516PE-PSV-2020-0377
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-26919

Get alerted when CVE-2020-26919 or the next vulnerability affects your stack