CVE-2026-0410

Published: Jun 9, 2026Modified: Jun 18, 2026

1.9

Vector

CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber

CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:AmberShow less

Source: a2826606-91e7-4eb6-899e-8484bd4575d5 (Secondary)

Description

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.

Affected (19)

Products: Netgear: R7000 Firmware, Rax20 Firmware, Rax35v2 Firmware, Rax41 Firmware, Rax41v2 Firmware, Rax42 Firmware, Rax42v2 Firmware, Rax43 Firmware, Rax43v2 Firmware, Rax45 Firmware, Rax49s Firmware, Rax50 Firmware, Rax50s Firmware, Rax50v2 Firmware, Rax54sv2 Firmware, Raxe450 Firmware, Raxe500 Firmware, Xr1000 Firmware, Xr1000v2 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R7000 Firmware	Before 1.0.11.216

Running on/with	Platform Versions
Netgear R7000	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax20 Firmware	Before 1.0.18.144

Running on/with	Platform Versions
Netgear Rax20	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax35v2 Firmware	Before 1.0.16.132

Running on/with	Platform Versions
Netgear Rax35v2	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax41 Firmware	Before 1.0.16.132

Running on/with	Platform Versions
Netgear Rax41	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax41v2 Firmware	Before 1.1.4.28

Running on/with	Platform Versions
Netgear Rax41v2	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax42 Firmware	Before 1.0.16.132

Running on/with	Platform Versions
Netgear Rax42	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax42v2 Firmware	Before 1.1.4.28

Running on/with	Platform Versions
Netgear Rax42v2	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax43 Firmware	Before 1.0.16.132

Running on/with	Platform Versions
Netgear Rax43	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax43v2 Firmware	Before 1.1.4.28

Running on/with	Platform Versions
Netgear Rax43v2	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax45 Firmware	Before 1.0.16.132

Running on/with	Platform Versions
Netgear Rax45	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax49s Firmware	Before 1.1.4.28

Running on/with	Platform Versions
Netgear Rax49s	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax50 Firmware	Before 1.0.16.132

Running on/with	Platform Versions
Netgear Rax50	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax50s Firmware	Before 1.0.16.132

Running on/with	Platform Versions
Netgear Rax50s	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax50v2 Firmware	Before 1.1.4.28

Running on/with	Platform Versions
Netgear Rax50v2	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax54sv2 Firmware	Before 1.1.4.28

Running on/with	Platform Versions
Netgear Rax54sv2	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Raxe450 Firmware	Before 1.2.14.114

Running on/with	Platform Versions
Netgear Raxe450	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Raxe500 Firmware	Before 1.2.14.114

Running on/with	Platform Versions
Netgear Raxe500	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Xr1000 Firmware	Before 1.1.0.22

Running on/with	Platform Versions
Netgear Xr1000	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Xr1000v2 Firmware	Before 1.1.0.22

Running on/with	Platform Versions
Netgear Xr1000v2	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.