CVE-2026-0410

MEDIUM

Insufficient input validation in certain NETGEAR routers

Title source: cna
STIX 2.1

Description

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.

References (20)

Core 20
Core References

Scores

CVSS v3 4.5
EPSS 0.0022
EPSS Percentile 12.5%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-20
Status published
Products (39)
NETGEAR/R7000 < V1.0.11.216
netgear/r7000_firmware < 1.0.11.216
NETGEAR/RAX20 < V1.0.18.144
netgear/rax20_firmware < 1.0.18.144
NETGEAR/RAX35v2 < V1.0.16.132
netgear/rax35v2_firmware < 1.0.16.132
NETGEAR/RAX41 < V1.0.16.132
netgear/rax41_firmware < 1.0.16.132
NETGEAR/RAX41v2 < V1.1.4.28
netgear/rax41v2_firmware < 1.1.4.28
... and 29 more
Published Jun 09, 2026
Tracked Since Jun 09, 2026