← Database

CVE-2026-30702

CRITICAL CVSS: 9.8 Published: 2026-03-18 Modified: 2026-06-17

Description

The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) implements a broken authentication mechanism in its web management interface. The login page does not properly enforce session validation, allowing attackers to bypass authentication by directly accessing restricted web application endpoints through forced browsing

Affected Platforms

Unknown

Weakness Type

CWE-285

References