Riskcovery

CVE-2026-0417

Insufficient input validation in certain NETGEAR routers

State
Published
Severity
4.3 Medium
Published
Jun 9, 2026
Updated
Jun 10, 2026
Reserved
Dec 3, 2025

Read the record on cve.org

Description

Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity.

Scores

CVSSScoreVectorSource
4.04.3 MediumCVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:AmberNETGEAR

Weaknesses

  • CWE-20 Improper input validation

Affected Products

ProductVersions
MR60NETGEAR
  • before V1.1.7.132Affected
MR70NETGEAR
  • before V1.0.3.28Affected
MR80NETGEAR
  • before V1.1.7.14Affected
MS60NETGEAR
  • before V1.1.7.132Affected
MS70NETGEAR
  • before V1.0.3.28Affected
MS80NETGEAR
  • before V1.1.7.14Affected
R6400v2NETGEAR
  • before V1.0.4.128Affected
R6700v3NETGEAR
  • before V1.0.4.128Affected
R6900PNETGEAR
  • before V1.3.3.152Affected
R7000NETGEAR
  • before V1.0.11.216Affected
R7000PNETGEAR
  • before V1.3.3.152Affected
R7960PNETGEAR
  • before V1.4.4.92Affected
R8000PNETGEAR
  • before V1.4.4.92Affected
R8500NETGEAR
  • 1.0.2.160 and earlierAffected
RAX20NETGEAR
  • before V1.0.18.144Affected
RAX35v2NETGEAR
  • before V1.0.16.132Affected
RAX40v2NETGEAR
  • before V1.0.12.118Affected
RAX41NETGEAR
  • before V1.0.12.118Affected
RAX42NETGEAR
  • before V1.0.12.118Affected
RAX43NETGEAR
  • before V1.0.12.120Affected
RAX45NETGEAR
  • before V1.0.12.118Affected
RAX48NETGEAR
  • before V1.0.12.118Affected
RAX50NETGEAR
  • before V1.0.12.120Affected
RAX50SNETGEAR
  • before V1.0.12.120Affected
RAXE450NETGEAR
  • before V1.0.10.86Affected
RAXE500NETGEAR
  • before V1.0.10.86Affected
XR1000NETGEAR
  • before V1.0.0.68Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.