CVE-2026-0418
EUVD-2026-3546109.06.2026, 17:16
Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| netgear | cbr750_firmware | 𝑥 < 4.6.14.4 |
| netgear | ex6120_firmware | - |
| netgear | ex6130_firmware | - |
| netgear | mr60_firmware | 𝑥 < 1.1.7.128 |
| netgear | mr70_firmware | 𝑥 < 1.0.3.28 |
| netgear | mr80_firmware | 𝑥 < 1.1.7.6 |
| netgear | ms60_firmware | 𝑥 < 1.1.7.128 |
| netgear | ms70_firmware | 𝑥 < 1.0.3.28 |
| netgear | ms80_firmware | 𝑥 < 1.1.7.6 |
| netgear | rax15_firmware | - |
| netgear | rax20_firmware | - |
| netgear | rax200_firmware | - |
| netgear | rax35v2_firmware | 𝑥 < 1.0.11.112 |
| netgear | rax38v2_firmware | 𝑥 < 1.0.11.112 |
| netgear | rax40v2_firmware | 𝑥 < 1.0.11.112 |
| netgear | rax42_firmware | 𝑥 < 1.0.11.112 |
| netgear | rax43_firmware | 𝑥 < 1.0.11.112 |
| netgear | rax45_firmware | 𝑥 < 1.0.11.112 |
| netgear | rax48_firmware | 𝑥 < 1.0.11.112 |
| netgear | rax50_firmware | 𝑥 < 1.0.11.112 |
| netgear | rax50s_firmware | 𝑥 < 1.0.11.112 |
| netgear | rax75_firmware | - |
| netgear | rax80_firmware | - |
| netgear | raxe450_firmware | 𝑥 < 1.0.10.86 |
| netgear | raxe500_firmware | 𝑥 < 1.0.10.86 |
| netgear | rbr750_firmware | 𝑥 < 4.6.14.3 |
| netgear | rbr840_firmware | 𝑥 < 4.6.14.3 |
| netgear | rbr850_firmware | 𝑥 < 4.6.14.3 |
| netgear | rbre960_firmware | 𝑥 < 6.3.7.5 |
| netgear | rbs750_firmware | 𝑥 < 4.6.14.3 |
| netgear | rbs840_firmware | 𝑥 < 4.6.14.3 |
| netgear | rbs850_firmware | 𝑥 < 4.6.14.3 |
| netgear | rbse960_firmware | 𝑥 < 6.3.7.5 |
| netgear | rs700_firmware | 𝑥 < 1.0.7.66 |
| netgear | xr1000_firmware | 𝑥 < 1.0.0.68 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-15 - External Control of System or Configuration SettingOne or more system settings or configuration elements can be externally controlled by a user.
- CWE-610 - Externally Controlled Reference to a Resource in Another SphereThe product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.
References