CVE-2026-0417

MEDIUM

Insufficient input validation in certain NETGEAR routers

Title source: cna
STIX 2.1

Description

Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity.

References (28)

Core 28
Core References

Scores

CVSS v4 4.3
EPSS 0.0026
EPSS Percentile 16.8%
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-20
Status published
Products (28)
NETGEAR/MR60 < V1.1.7.132
NETGEAR/MR70 < V1.0.3.28
NETGEAR/MR80 < V1.1.7.14
NETGEAR/MS60 < V1.1.7.132
NETGEAR/MS70 < V1.0.3.28
NETGEAR/MS80 < V1.1.7.14
NETGEAR/R6400v2 < V1.0.4.128
NETGEAR/R6700v3 < V1.0.4.128
NETGEAR/R6900P < V1.3.3.152
NETGEAR/R7000 < V1.0.11.216
... and 18 more
Published Jun 09, 2026
Tracked Since Jun 09, 2026