CVE-2026-0415

MEDIUM EPSS 13.6%
Published Jun 9, 20262w ago · Modified Jun 18, 20261w ago
4.3 CVSS 4.0
Medium
Find Similar
Published Jun 9, 2026 2w ago
Last Modified Jun 18, 2026 1w ago

Description

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

CVSS Details

Base Score
4.3
Exploitability
Impact
Vector string
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Adjacent
Attack Complexity Low
Privileges Required High
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
13.6% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-20 Improper Input Validation Validation

Affected Products 26

VendorProductVersionRange
netgearrbe970_firmware* <9.12.4.9
netgearrbe970*any
netgearrbr750_firmware* <7.2.8.5
netgearrbr750*any
netgearrbr840_firmware* <7.2.8.5
netgearrbr840*any
netgearrbr850_firmware* <7.2.8.5
netgearrbr850*any
netgearrbr860_firmware* <7.2.8.5
netgearrbr860*any
netgearrbre950_firmware* <7.2.8.5
netgearrbre950*any
netgearrbre960_firmware* <7.2.8.5
netgearrbre960*any
netgearrbs750_firmware* <7.2.8.5
netgearrbs750*any
netgearrbs840_firmware* <7.2.8.5
netgearrbs840*any
netgearrbs850_firmware* <7.2.8.5
netgearrbs850*any
netgearrbs860_firmware* <7.2.8.5
netgearrbs860*any
netgearrbse950_firmware* <7.2.8.5
netgearrbse950*any
netgearrbse960_firmware* <7.2.8.5
netgearrbse960*any

References 14

  • kb.netgear.com https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory
    Vendor Advisory
  • netgear.com https://www.netgear.com/support/product/rbe970/
    Product
  • netgear.com https://www.netgear.com/support/product/rbr750/
    Product
  • netgear.com https://www.netgear.com/support/product/rbr840/
    Product
  • netgear.com https://www.netgear.com/support/product/rbr850/
    Product
  • netgear.com https://www.netgear.com/support/product/rbr860/
    Product
  • netgear.com https://www.netgear.com/support/product/rbre950/
    Product
  • netgear.com https://www.netgear.com/support/product/rbre960/
    Product
  • netgear.com https://www.netgear.com/support/product/rbs750/
    Product
  • netgear.com https://www.netgear.com/support/product/rbs840/
    Product
  • netgear.com https://www.netgear.com/support/product/rbs850/
    Product
  • netgear.com https://www.netgear.com/support/product/rbs860/
    Product
  • netgear.com https://www.netgear.com/support/product/rbse950/
    Product
  • netgear.com https://www.netgear.com/support/product/rbse960/
    Product

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.