A NetComm authentication bypass (CVE-2026-35019, CVSS 9.2) uses a hardcoded AES key to forge admin session cookies. Update to firmware R6B032 now.
session cookie
A security flaw in code-server can expose your VS Code sessions. Learn how attackers can steal credentials and what to do.