CVE-2026-0410

published 2026-06-09

CVE-2026-0410: Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and…

Priority P4 12 low 1.9 CVSS 4.0

AV A AC H AT N PR H UI N VC N VI H VA N SC N SI N SA N E U CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V D RE L U Amber

Authenticated administrators connected to the local network can gain
elevated access to the router and make unauthorized changes to router
software and functionality.

Affected

20 ranges

Vendor	Product	Version range	Fixed in
netgear	r7000	< V1.0.11.216	V1.0.11.216
netgear	rax20	< V1.0.18.144	V1.0.18.144
netgear	rax35v2	< V1.0.16.132	V1.0.16.132
netgear	rax41	< V1.0.16.132	V1.0.16.132
netgear	rax41v2	< V1.1.4.28	V1.1.4.28
netgear	rax42	< V1.0.16.132	V1.0.16.132
netgear	rax42v2	< V1.1.4.28	V1.1.4.28
netgear	rax43	< V1.0.16.132	V1.0.16.132
netgear	rax43v2	< V1.1.4.28	V1.1.4.28
netgear	rax45	< V1.0.16.132	V1.0.16.132
netgear	rax49s	< V1.1.4.28	V1.1.4.28
netgear	rax50	< V1.0.16.132	V1.0.16.132
netgear	rax50s	< V1.0.16.132	V1.0.16.132
netgear	rax50v2	< V1.1.4.28	V1.1.4.28
netgear	rax54sv2	< V1.1.4.28	V1.1.4.28
netgear	rax54v2	< V1.1.4.28	V1.1.4.28
netgear	raxe450	< V1.2.14.114	V1.2.14.114
netgear	raxe500	< V1.2.14.114	V1.2.14.114
netgear	xr1000	< V1.1.0.22	V1.1.0.22
netgear	xr1000v2	< V1.1.0.22	V1.1.0.22

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20