Riskcovery

CVE-2026-0410

Insufficient input validation in certain NETGEAR routers

State
Published
Severity
1.9 Low
Published
Jun 9, 2026
Updated
Jun 10, 2026
Reserved
Dec 3, 2025

Read the record on cve.org

Description

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.

Scores

CVSSScoreVectorSource
4.01.9 LowCVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:AmberNETGEAR

Weaknesses

  • CWE-20 Insufficient input validation

Affected Products

ProductVersions
R7000NETGEAR
  • before V1.0.11.216Affected
RAX20NETGEAR
  • before V1.0.18.144Affected
RAX35v2NETGEAR
  • before V1.0.16.132Affected
RAX41NETGEAR
  • before V1.0.16.132Affected
RAX41v2NETGEAR
  • before V1.1.4.28Affected
RAX42NETGEAR
  • before V1.0.16.132Affected
RAX42v2NETGEAR
  • before V1.1.4.28Affected
RAX43NETGEAR
  • before V1.0.16.132Affected
RAX43v2NETGEAR
  • before V1.1.4.28Affected
RAX45NETGEAR
  • before V1.0.16.132Affected
RAX49SNETGEAR
  • before V1.1.4.28Affected
RAX50NETGEAR
  • before V1.0.16.132Affected
RAX50SNETGEAR
  • before V1.0.16.132Affected
RAX50v2NETGEAR
  • before V1.1.4.28Affected
RAX54Sv2NETGEAR
  • before V1.1.4.28Affected
RAX54v2NETGEAR
  • before V1.1.4.28Affected
RAXE450NETGEAR
  • before V1.2.14.114Affected
RAXE500NETGEAR
  • before V1.2.14.114Affected
XR1000NETGEAR
  • before V1.1.0.22Affected
XR1000v2NETGEAR
  • before V1.1.0.22Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.