CVE-2026-0418

MEDIUM

Certain NETGEAR devices allow administrators to tamper with system

Title source: cna
STIX 2.1

Description

Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.

References (36)

Core 36
Core References

Scores

CVSS v4 4.3
EPSS 0.0026
EPSS Percentile 16.8%
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:D/RE:L/U:Amber

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-15
Status published
Products (35)
NETGEAR/CBR750 < v4.6.14.4
NETGEAR/EX6120 < 1.0.0.72
NETGEAR/EX6130 < 1.0.0.54
NETGEAR/MR60 < V1.1.7.128
NETGEAR/MR70 < V1.0.3.28
NETGEAR/MR80 < V1.1.7.6
NETGEAR/MS60 < V1.1.7.128
NETGEAR/MS70 < V1.0.3.28
NETGEAR/MS80 < V1.1.7.6
NETGEAR/RAX15 < 1.0.18.144
... and 25 more
Published Jun 09, 2026
Tracked Since Jun 09, 2026