CVE-2026-0417

MEDIUM

Insufficient input validation in certain NETGEAR routers

Title source: cna
STIX 2.1

Description

Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity.

References (28)

Core 28
Core References

Scores

CVSS v3 4.5
EPSS 0.0023
EPSS Percentile 13.9%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-20
Status published
Products (50)
NETGEAR/MR60 < V1.1.7.132
netgear/mr60_firmware < 1.1.7.132
NETGEAR/MR70 < V1.0.3.28
netgear/mr70_firmware < 1.0.3.28
NETGEAR/MR80 < V1.1.7.14
netgear/mr80_firmware < 1.1.7.14
NETGEAR/MS60 < V1.1.7.132
netgear/ms60_firmware < 1.1.7.132
NETGEAR/MS70 < V1.0.3.28
netgear/ms70_firmware < 1.0.3.28
... and 40 more
Published Jun 09, 2026
Tracked Since Jun 09, 2026