What is CVE-2026-30702?

CVE-2026-30702 is a critical-severity vulnerability in N/a, classified under Improper Authorization. CVSS score: 9.8/10. Published 2026-03-18.

How severe is CVE-2026-30702?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Auth bypass in N/a

CVE-2026-30702

The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) implements a broken authentication mechanism in its web management interface. The login page does not properly enforce session validation, allowing attackers to bypass authentication by directly accessing restricted web application endpoints through forced browsing

EPSS: 0.004 (29.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-285 — Improper Authorization

References

cve@mitre.org
cve@mitre.org

Frequently asked questions

What is CVE-2026-30702?: CVE-2026-30702 is a critical-severity vulnerability in N/a, classified under Improper Authorization. CVSS score: 9.8/10. Published 2026-03-18.
How severe is CVE-2026-30702?: Critical severity. CVSS v3 base score is 9.8 out of 10.