PT-2026-51523 · Netcomm Wireless Pty · Nf20Mesh

Brendan Scarvell · Published 2026-06-23 · Updated 2026-06-23 · CVE-2026-35019

Mitre

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NetComm NF20MESH routers running firmware R6B031 and earlier contain an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by exploiting a hardcoded AES-256 key used to encrypt session cookies for the web management interface. Attackers can forge a valid encrypted session cookie using the shared hardcoded key and bypass authentication checks to obtain full administrative control of the management interface while any legitimate administrator session is active.

Fix

Weakness Enumeration

CWE-321

Related Identifiers

CVE-2026-35019

Affected Products

Nf20Mesh

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-35019 · Security Note
• https://support.netcommwireless.com/api/Media/Firmware/4407c21d-e990-49a4-9754-b72475f20c76?Product=NF20MESH%20Release%20Notes.pdf · Patch
• https://vulncheck.com/advisories/netcomm-nf20mesh-r6b032-hardcoded-aes-key-authentication-bypass · Note
• https://signal11.io/advisories/netcomm-nf20-mesh-authentication-bypass · Note
• https://support.netcommwireless.com/products/nf20mesh#Firmware · Note