CVE-2026-0417

EUVD-2026-35460
Insufficient input validation vulnerability in the listed NETGEAR devices allows
authenticated administrators connected to the local network to tamper with
the router's integrity.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.5 MEDIUM
ADJACENT_NETWORK
LOW
HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 13%
Affected Products (NVD)
VendorProductVersion
netgearmr60_firmware
𝑥
< 1.1.7.132
netgearmr70_firmware
𝑥
< 1.0.3.28
netgearmr80_firmware
𝑥
< 1.1.7.14
netgearms60_firmware
𝑥
< 1.1.7.132
netgearms70_firmware
𝑥
< 1.0.3.28
netgearms80_firmware
𝑥
< 1.1.7.14
netgearr6400v2_firmware
𝑥
< 1.0.4.128
netgearr6700v3_firmware
𝑥
< 1.0.4.128
netgearr6900p_firmware
𝑥
< 1.3.3.152
netgearr7000_firmware
𝑥
< 1.0.11.216
netgearr7000p_firmware
𝑥
< 1.3.3.152
netgearr7960p_firmware
𝑥
< 1.4.4.92
netgearr8000p_firmware
𝑥
< 1.4.4.92
netgearr8500_firmware
-
netgearrax20_firmware
𝑥
< 1.0.18.144
netgearrax35v2_firmware
𝑥
< 1.0.16.132
netgearrax40v2_firmware
𝑥
< 1.0.12.118
netgearrax41_firmware
𝑥
< 1.0.12.118
netgearrax42_firmware
𝑥
< 1.0.12.118
netgearrax43_firmware
𝑥
< 1.0.12.120
netgearrax45_firmware
𝑥
< 1.0.12.118
netgearrax48_firmware
𝑥
< 1.0.12.118
netgearrax50_firmware
𝑥
< 1.0.12.120
netgearrax50s_firmware
𝑥
< 1.0.12.120
netgearraxe450_firmware
𝑥
< 1.0.10.86
netgearraxe500_firmware
𝑥
< 1.0.10.86
netgearxr1000_firmware
𝑥
< 1.0.0.68
𝑥
= Vulnerable software versions