cbcvebase.
CVE-2026-0417
published 2026-06-09

CVE-2026-0417: Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the…

PriorityP423medium4.5CVSS 3.1
AVAACLPRHUINSUCNIHAN
EPSS
0.23%
13.0th percentile
Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity.

Affected

53 ranges· showing 25
VendorProductVersion rangeFixed in
netgearmr60< V1.1.7.132V1.1.7.132
netgearmr60_firmware< 1.1.7.1321.1.7.132
netgearmr70< V1.0.3.28V1.0.3.28
netgearmr70_firmware< 1.0.3.281.0.3.28
netgearmr80< V1.1.7.14V1.1.7.14
netgearmr80_firmware< 1.1.7.141.1.7.14
netgearms60< V1.1.7.132V1.1.7.132
netgearms60_firmware< 1.1.7.1321.1.7.132
netgearms70< V1.0.3.28V1.0.3.28
netgearms70_firmware< 1.0.3.281.0.3.28
netgearms80< V1.1.7.14V1.1.7.14
netgearms80_firmware< 1.1.7.141.1.7.14
netgearr6400v2< V1.0.4.128V1.0.4.128
netgearr6400v2_firmware< 1.0.4.1281.0.4.128
netgearr6700v3< V1.0.4.128V1.0.4.128
netgearr6700v3_firmware< 1.0.4.1281.0.4.128
netgearr6900p< V1.3.3.152V1.3.3.152
netgearr6900p_firmware< 1.3.3.1521.3.3.152
netgearr7000< V1.0.11.216V1.0.11.216
netgearr7000_firmware< 1.0.11.2161.0.11.216
netgearr7000p< V1.3.3.152V1.3.3.152
netgearr7000p_firmware< 1.3.3.1521.3.3.152
netgearr7960p< V1.4.4.92V1.4.4.92
netgearr7960p_firmware< 1.4.4.921.4.4.92
netgearr8000p< V1.4.4.92V1.4.4.92

CVSS provenance

nvdv3.14.5MEDIUMCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
nvdv4.04.3MEDIUMCVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.