← Back

CVE-2026-0416

nvd nist
Published: Jun 9, 2026Modified: Jun 18, 2026

JSON object

Loading...
4.3
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber
Show more
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:AmberShow less
Source: a2826606-91e7-4eb6-899e-8484bd4575d5 (Secondary)

Description

An insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated administrator with local network access to submit crafted input that bypasses intended management interface restrictions, resulting in unauthorized modification of protected router software or functionality.

Affected (2)

Netgear
2 products
Raxe450 Firmware
Raxe500 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Raxe450 Firmware
Before 1.2.14.114
Running on/withPlatform Versions
Netgear
Raxe450
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Raxe500 Firmware
Before 1.2.14.114
Running on/withPlatform Versions
Netgear
Raxe500
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (3)

Source: a2826606-91e7-4eb6-899e-8484bd4575d5
Vendor Advisory
Source: a2826606-91e7-4eb6-899e-8484bd4575d5
Product
Source: a2826606-91e7-4eb6-899e-8484bd4575d5
Product

Timeline

No history available yet.