CVE-2026-0417

published 2026-06-09

CVE-2026-0417: Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the…

Priority P4 23 medium 4.3 CVSS 4.0

AV A AC L AT N PR H UI N VC N VI H VA N SC N SI N SA N E U CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V D RE L U Amber

Insufficient input validation vulnerability in the listed NETGEAR devices allows
authenticated administrators connected to the local network to tamper with
the router's integrity.

Affected

27 ranges · showing 25

Vendor	Product	Version range	Fixed in
netgear	mr60	< V1.1.7.132	V1.1.7.132
netgear	mr70	< V1.0.3.28	V1.0.3.28
netgear	mr80	< V1.1.7.14	V1.1.7.14
netgear	ms60	< V1.1.7.132	V1.1.7.132
netgear	ms70	< V1.0.3.28	V1.0.3.28
netgear	ms80	< V1.1.7.14	V1.1.7.14
netgear	r6400v2	< V1.0.4.128	V1.0.4.128
netgear	r6700v3	< V1.0.4.128	V1.0.4.128
netgear	r6900p	< V1.3.3.152	V1.3.3.152
netgear	r7000	< V1.0.11.216	V1.0.11.216
netgear	r7000p	< V1.3.3.152	V1.3.3.152
netgear	r7960p	< V1.4.4.92	V1.4.4.92
netgear	r8000p	< V1.4.4.92	V1.4.4.92
netgear	r8500	<= 1.0.2.160	—
netgear	rax20	< V1.0.18.144	V1.0.18.144
netgear	rax35v2	< V1.0.16.132	V1.0.16.132
netgear	rax40v2	< V1.0.12.118	V1.0.12.118
netgear	rax41	< V1.0.12.118	V1.0.12.118
netgear	rax42	< V1.0.12.118	V1.0.12.118
netgear	rax43	< V1.0.12.120	V1.0.12.120
netgear	rax45	< V1.0.12.118	V1.0.12.118
netgear	rax48	< V1.0.12.118	V1.0.12.118
netgear	rax50	< V1.0.12.120	V1.0.12.120
netgear	rax50s	< V1.0.12.120	V1.0.12.120
netgear	raxe450	< V1.0.10.86	V1.0.10.86

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20