CVE-2016-7809: Cross-site request forgery (CSRF) vulnerability in Corega CG-WLR300NX firmware Ver.

Security readout for executives and security teams

CVE-2016-7809 affects Corega CG-WLR300NX routers running firmware 1.20 or earlier. A logged-in administrator could be tricked into causing unintended router actions through cross-site request forgery. The public bundle does not provide CVSS scoring, specific operations affected, or confirmed exploitation. Exposure is limited to organizations or users still operating Corega CG-WLR300NX devices on firmware 1.20 or earlier, especially where administrators access the router management interface from regular browsing sessions. Treat this as a focused legacy-device risk. It does not currently justify emergency response based on the provided sources, but affected routers should be identified and updated, isolated, or replaced during near-term network hygiene work. Mitigation focus: Inventory Corega CG-WLR300NX devices and record firmware versions.; Check Corega and JVN guidance for firmware updates or replacement advice.; Restrict router administration to trusted management networks..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.