A network-exploitable flaw is a vulnerability that can be triggered remotely over a network connection, without needing physical access to the device. The attacker may only need to send crafted traffic to a service, port, or management interface that is reachable from the network. In practice, this often includes bugs in routers, web apps, VPN gateways, and other internet-facing systems.
This matters because remote reach dramatically increases risk: if the vulnerable component is exposed, attackers can probe it at scale, often before defenders notice. Network-exploitable bugs are common in automated scanning, proof-of-concept testing, and real-world intrusion attempts because they let an adversary attack many targets quickly. Defenders reduce exposure by limiting reachable services, disabling remote administration, segmenting management interfaces, and patching firmware or software promptly.