CVE-2026-0420CWE-325

Missing TLS certificate validation in NETGEAR's ReadyCloud client app

Medium · published June 9, 2026

CVSS v4.0
4.6
EPSS
0%
Percentile
2.7
In the wild
Unconfirmed
What it is

An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting the product's confidentiality. This vulnerability affects the listed NETGEAR models.

The record
Technical detail
CVSS v4.0
4.6 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
EPSS
0.00135 · 2.7th percentile
Weakness
CWE-325 · Missing Cryptographic Step
Published
2026-06-09T15:50Z
EPSS history
Timeline
  • 09 JUN 15:50Z
    Missing TLS certificate validation in NETGEAR's ReadyCloud client app
    cvelistv5