Log in Start free

Vulnerability · Published Jun 9, 2026 · Assigned by NETGEAR

CVE-2026-0410Insufficient input validation in certain NETGEAR routers

Low 1.9

In plain English

A low-severity improper input validation in R7000 from NETGEAR. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).

Severity (CVSS 4.0)1.9Low
Exploit odds (30 days)0.2%top 87.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.

Affected products (as reported)

VendorProductVersions
NETGEAR R7000 0 – before V1.0.11.216
NETGEAR RAX20 0 – before V1.0.18.144
NETGEAR RAX35v2 0 – before V1.0.16.132
NETGEAR RAX41 0 – before V1.0.16.132
NETGEAR RAX41v2 0 – before V1.1.4.28
NETGEAR RAX42 0 – before V1.0.16.132
NETGEAR RAX42v2 0 – before V1.1.4.28
NETGEAR RAX43 0 – before V1.0.16.132
NETGEAR RAX43v2 0 – before V1.1.4.28
NETGEAR RAX45 0 – before V1.0.16.132
NETGEAR RAX49S 0 – before V1.1.4.28
NETGEAR RAX50 0 – before V1.0.16.132
NETGEAR RAX50S 0 – before V1.0.16.132
NETGEAR RAX50v2 0 – before V1.1.4.28
NETGEAR RAX54Sv2 0 – before V1.1.4.28
NETGEAR RAX54v2 0 – before V1.1.4.28
NETGEAR RAXE450 0 – before V1.2.14.114
NETGEAR RAXE500 0 – before V1.2.14.114
NETGEAR XR1000 0 – before V1.1.0.22
NETGEAR XR1000v2 0 – before V1.1.0.22

Weakness: CWE-20 · Vector: CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber

References