CVE-2016-7808: Cross-site scripting vulnerability in Corega CG-WLBARGMH and CG-WLBARGNL allows remote attackers to inject...

Security readout for executives and security teams

This CVE affects two Corega wireless router models and allows cross-site scripting. An attacker could potentially make the device’s web interface run attacker-supplied script or HTML. The public bundle does not include severity scoring, exact attack path, or a confirmed fix, so urgency depends on whether these models exist in your environment. Exposure is limited to environments that still operate Corega CG-WLBARGMH or CG-WLBARGNL devices. Internet-facing or broadly reachable management interfaces would increase concern, but the source bundle does not confirm interface location, authentication requirements, or default exposure. Treat this as a targeted legacy-device exposure review, not a confirmed emergency. Prioritize finding affected routers and reducing management-plane exposure, especially if these devices protect business networks or remain reachable from untrusted segments. Mitigation focus: Inventory Corega CG-WLBARGMH and CG-WLBARGNL devices in all networks.; Review Corega and JVN advisories for supported remediation guidance.; Restrict device administration to trusted networks and administrators..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.