EIP-2026-117682

This is a technical writeup describing an unquoted service path vulnerability in Netgear Genie 2.4.64. The vulnerability allows local privilege escalation (LPE) by exploiting the service path's lack of quotes, enabling an attacker to insert malicious executables in the system root path.