CVE-2026-107917
Insufficient input validation vulnerability in NETGEAR R7300 router
- State
- Published
- Severity
- 4.3 Medium
- Published
- Oct 13, 2026
- Updated
- Oct 16, 2026
- Reserved
- Oct 9, 2026
Description
Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 4.3 Medium | CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber | NETGEAR |
| 3.1 | 4.5 Medium | CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N | NETGEAR |
Weaknesses
- CWE-20 Improper input validation
Affected Products
| Product | Versions |
|---|---|
R7300DSTNETGEAR |
|
References
- https://www.netgear.com/support/product/r7300dstpatchproduct
- https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisoryvendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.