CVE-2026-0410: Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and…

PriorityP422medium4.5CVSS 3.1

AVAACLPRHUINSUCNIHAN

EPSS

0.22%

12.2th percentile

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.

Affected

39 ranges· showing 25

Vendor	Product	Version range	Fixed in
netgear	r7000	< V1.0.11.216	V1.0.11.216
netgear	r7000_firmware	< 1.0.11.216	1.0.11.216
netgear	rax20	< V1.0.18.144	V1.0.18.144
netgear	rax20_firmware	< 1.0.18.144	1.0.18.144
netgear	rax35v2	< V1.0.16.132	V1.0.16.132
netgear	rax35v2_firmware	< 1.0.16.132	1.0.16.132
netgear	rax41	< V1.0.16.132	V1.0.16.132
netgear	rax41_firmware	< 1.0.16.132	1.0.16.132
netgear	rax41v2	< V1.1.4.28	V1.1.4.28
netgear	rax41v2_firmware	< 1.1.4.28	1.1.4.28
netgear	rax42	< V1.0.16.132	V1.0.16.132
netgear	rax42_firmware	< 1.0.16.132	1.0.16.132
netgear	rax42v2	< V1.1.4.28	V1.1.4.28
netgear	rax42v2_firmware	< 1.1.4.28	1.1.4.28
netgear	rax43	< V1.0.16.132	V1.0.16.132
netgear	rax43_firmware	< 1.0.16.132	1.0.16.132
netgear	rax43v2	< V1.1.4.28	V1.1.4.28
netgear	rax43v2_firmware	< 1.1.4.28	1.1.4.28
netgear	rax45	< V1.0.16.132	V1.0.16.132
netgear	rax45_firmware	< 1.0.16.132	1.0.16.132
netgear	rax49s	< V1.1.4.28	V1.1.4.28
netgear	rax49s_firmware	< 1.1.4.28	1.1.4.28
netgear	rax50	< V1.0.16.132	V1.0.16.132
netgear	rax50_firmware	< 1.0.16.132	1.0.16.132
netgear	rax50s	< V1.0.16.132	V1.0.16.132

CVSS provenance

nvdv3.14.5MEDIUMCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

nvdv4.01.9LOWCVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.