CVE-2026-0418

published 2026-06-09

CVE-2026-0418: Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.

Priority P4 24 medium 4.3 CVSS 4.0

AV A AC L AT N PR H UI N VC N VI H VA N SC N SI N SA N E U CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R U V D RE L U Amber

Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network
to tamper with the system.

Affected

35 ranges · showing 25

Vendor	Product	Version range	Fixed in
netgear	cbr750	< v4.6.14.4	v4.6.14.4
netgear	ex6120	<= 1.0.0.72	—
netgear	ex6130	<= 1.0.0.54	—
netgear	mr60	< V1.1.7.128	V1.1.7.128
netgear	mr70	< V1.0.3.28	V1.0.3.28
netgear	mr80	< V1.1.7.6	V1.1.7.6
netgear	ms60	< V1.1.7.128	V1.1.7.128
netgear	ms70	< V1.0.3.28	V1.0.3.28
netgear	ms80	< V1.1.7.6	V1.1.7.6
netgear	rax15	<= 1.0.18.144	—
netgear	rax20	<= 1.0.18.144	—
netgear	rax200	<= 1.0.11.148	—
netgear	rax35v2	< V1.0.11.112	V1.0.11.112
netgear	rax38v2	< V1.0.11.112	V1.0.11.112
netgear	rax40v2	< V1.0.11.112	V1.0.11.112
netgear	rax42	< V1.0.11.112	V1.0.11.112
netgear	rax43	< V1.0.11.112	V1.0.11.112
netgear	rax45	< V1.0.11.112	V1.0.11.112
netgear	rax48	< V1.0.11.112	V1.0.11.112
netgear	rax50	< V1.0.11.112	V1.0.11.112
netgear	rax50s	< V1.0.11.112	V1.0.11.112
netgear	rax75	<= 1.0.11.148	—
netgear	rax80	<= 1.0.11.148	—
netgear	raxe450	< V1.0.10.86	V1.0.10.86
netgear	raxe500	< V1.0.10.86	V1.0.10.86

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-15