CVE-2026-0417

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-0417
Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity.

4.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory Vendor Advisory
https://www.netgear.com/support/product/mr60/ Product
https://www.netgear.com/support/product/mr70/ Product
https://www.netgear.com/support/product/mr80/ Product
https://www.netgear.com/support/product/ms60/ Product
https://www.netgear.com/support/product/ms70/ Product
https://www.netgear.com/support/product/ms80/ Product
https://www.netgear.com/support/product/r6400v2/ Product
https://www.netgear.com/support/product/r6700v3/ Product
https://www.netgear.com/support/product/r6900p/ Product
https://www.netgear.com/support/product/r7000/ Product
https://www.netgear.com/support/product/r7000p/ Product
https://www.netgear.com/support/product/r7960p/ Product
https://www.netgear.com/support/product/r8000p/ Product
https://www.netgear.com/support/product/r8500/ Product
https://www.netgear.com/support/product/rax20/ Product
https://www.netgear.com/support/product/rax35v2/ Product
https://www.netgear.com/support/product/rax40v2/ Product
https://www.netgear.com/support/product/rax41/ Product
https://www.netgear.com/support/product/rax42/ Product
https://www.netgear.com/support/product/rax43/ Product
https://www.netgear.com/support/product/rax45/ Product
https://www.netgear.com/support/product/rax48/ Product
https://www.netgear.com/support/product/rax50/ Product
https://www.netgear.com/support/product/rax50s/ Product
https://www.netgear.com/support/product/raxe450/ Product
https://www.netgear.com/support/product/raxe500/ Product
https://www.netgear.com/support/product/xr1000/ Product
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:netgear:mr70_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:mr70:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:netgear:mr80_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:mr80:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:netgear:ms70_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ms70:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:netgear:ms80_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ms80:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:netgear:r6400v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6400v2:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:netgear:r6700v3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6700v3:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:netgear:r7960p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7960p:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:netgear:r8500_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:netgear:rax35v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax35v2:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:netgear:rax40v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax40v2:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:netgear:rax41_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax41:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:netgear:rax42_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax42:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:netgear:rax48_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax48:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:netgear:rax50s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax50s:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:netgear:raxe450_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:raxe450:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:netgear:raxe500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:raxe500:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:netgear:xr1000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:xr1000:-:*:*:*:*:*:*:*
History

23 Jul 2026, 08:10

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad de validación de entrada insuficiente en dispositivos NETGEAR permite a administradores autenticados conectados a la red local manipular la integridad del router.

18 Jun 2026, 13:53

Type Values Removed Values Added
CPE cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6400v2:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ms70_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax40v2:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax42_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ms70:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6700v3:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r8500_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax35v2:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax41_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:raxe500:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:raxe450_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ms80:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:mr70:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax41:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:mr80:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax50s:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r6700v3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax50s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r6400v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:mr80_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:mr70_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7960p:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax48:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:xr1000:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r7960p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:raxe500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ms80_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax35v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:xr1000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax40v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax42:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:raxe450:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax48_firmware:*:*:*:*:*:*:*:*
References () https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory - () https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory - Vendor Advisory
References () https://www.netgear.com/support/product/mr60/ - () https://www.netgear.com/support/product/mr60/ - Product
References () https://www.netgear.com/support/product/mr70/ - () https://www.netgear.com/support/product/mr70/ - Product
References () https://www.netgear.com/support/product/mr80/ - () https://www.netgear.com/support/product/mr80/ - Product
References () https://www.netgear.com/support/product/ms60/ - () https://www.netgear.com/support/product/ms60/ - Product
References () https://www.netgear.com/support/product/ms70/ - () https://www.netgear.com/support/product/ms70/ - Product
References () https://www.netgear.com/support/product/ms80/ - () https://www.netgear.com/support/product/ms80/ - Product
References () https://www.netgear.com/support/product/r6400v2/ - () https://www.netgear.com/support/product/r6400v2/ - Product
References () https://www.netgear.com/support/product/r6700v3/ - () https://www.netgear.com/support/product/r6700v3/ - Product
References () https://www.netgear.com/support/product/r6900p/ - () https://www.netgear.com/support/product/r6900p/ - Product
References () https://www.netgear.com/support/product/r7000/ - () https://www.netgear.com/support/product/r7000/ - Product
References () https://www.netgear.com/support/product/r7000p/ - () https://www.netgear.com/support/product/r7000p/ - Product
References () https://www.netgear.com/support/product/r7960p/ - () https://www.netgear.com/support/product/r7960p/ - Product
References () https://www.netgear.com/support/product/r8000p/ - () https://www.netgear.com/support/product/r8000p/ - Product
References () https://www.netgear.com/support/product/r8500/ - () https://www.netgear.com/support/product/r8500/ - Product
References () https://www.netgear.com/support/product/rax20/ - () https://www.netgear.com/support/product/rax20/ - Product
References () https://www.netgear.com/support/product/rax35v2/ - () https://www.netgear.com/support/product/rax35v2/ - Product
References () https://www.netgear.com/support/product/rax40v2/ - () https://www.netgear.com/support/product/rax40v2/ - Product
References () https://www.netgear.com/support/product/rax41/ - () https://www.netgear.com/support/product/rax41/ - Product
References () https://www.netgear.com/support/product/rax42/ - () https://www.netgear.com/support/product/rax42/ - Product
References () https://www.netgear.com/support/product/rax43/ - () https://www.netgear.com/support/product/rax43/ - Product
References () https://www.netgear.com/support/product/rax45/ - () https://www.netgear.com/support/product/rax45/ - Product
References () https://www.netgear.com/support/product/rax48/ - () https://www.netgear.com/support/product/rax48/ - Product
References () https://www.netgear.com/support/product/rax50/ - () https://www.netgear.com/support/product/rax50/ - Product
References () https://www.netgear.com/support/product/rax50s/ - () https://www.netgear.com/support/product/rax50s/ - Product
References () https://www.netgear.com/support/product/raxe450/ - () https://www.netgear.com/support/product/raxe450/ - Product
References () https://www.netgear.com/support/product/raxe500/ - () https://www.netgear.com/support/product/raxe500/ - Product
References () https://www.netgear.com/support/product/xr1000/ - () https://www.netgear.com/support/product/xr1000/ - Product
First Time Netgear mr80
Netgear rax50s
Netgear ms70 Firmware
Netgear rax20 Firmware
Netgear r6400v2 Firmware
Netgear mr60 Firmware
Netgear rax45 Firmware
Netgear rax42 Firmware
Netgear rax35v2
Netgear mr70 Firmware
Netgear mr60
Netgear r7960p Firmware
Netgear rax43
Netgear rax43 Firmware
Netgear r7000p Firmware
Netgear r8500 Firmware
Netgear r8500
Netgear rax50s Firmware
Netgear r8000p Firmware
Netgear raxe500
Netgear ms70
Netgear rax40v2
Netgear ms60 Firmware
Netgear r8000p
Netgear rax35v2 Firmware
Netgear xr1000 Firmware
Netgear rax41 Firmware
Netgear mr70
Netgear r6900p Firmware
Netgear r7000p
Netgear rax50 Firmware
Netgear
Netgear ms60
Netgear rax20
Netgear raxe450 Firmware
Netgear rax40v2 Firmware
Netgear rax41
Netgear ms80 Firmware
Netgear raxe500 Firmware
Netgear rax42
Netgear mr80 Firmware
Netgear r6400v2
Netgear raxe450
Netgear r6700v3 Firmware
Netgear rax50
Netgear xr1000
Netgear ms80
Netgear r6900p
Netgear rax45
Netgear rax48 Firmware
Netgear r7960p
Netgear r6700v3
Netgear r7000
Netgear r7000 Firmware
Netgear rax48
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.5

10 Jun 2026, 16:16

Type Values Removed Values Added
References
  • () https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory -
Summary (en) Insufficient input validation vulnerability in NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity. (en) Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity.

09 Jun 2026, 17:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-06-09 17:16

Updated : 2026-07-23 08:10

NVD link : CVE-2026-0417

Mitre link : CVE-2026-0417

CVE.ORG link : CVE-2026-0417

JSON object : View

Products Affected

netgear

  • ms60_firmware
  • rax42
  • xr1000
  • ms60
  • r8500_firmware
  • rax42_firmware
  • rax43
  • r7960p
  • xr1000_firmware
  • rax45
  • r6700v3
  • rax48
  • r7000
  • ms70
  • rax45_firmware
  • r6900p
  • raxe500_firmware
  • rax20_firmware
  • ms80
  • r7000p_firmware
  • raxe450
  • r6900p_firmware
  • raxe450_firmware
  • mr80
  • r7960p_firmware
  • rax20
  • r7000p
  • raxe500
  • rax41
  • rax43_firmware
  • rax50s_firmware
  • rax41_firmware
  • rax50
  • r6400v2
  • r7000_firmware
  • rax50_firmware
  • mr80_firmware
  • r8000p
  • mr70
  • rax35v2_firmware
  • r6400v2_firmware
  • r8000p_firmware
  • mr60_firmware
  • mr60
  • ms70_firmware
  • r8500
  • rax40v2_firmware
  • rax50s
  • rax35v2
  • rax40v2
  • mr70_firmware
  • ms80_firmware
  • rax48_firmware
  • r6700v3_firmware
CWE
CWE-20

Improper Input Validation

NVD-CWE-noinfo