Log in Start free

Vulnerability · Published Jun 9, 2026 · Assigned by NETGEAR

CVE-2026-0418Certain NETGEAR devices allow administrators to tamper with system

Medium 4.3

In plain English

A medium-severity security flaw in CBR750 from NETGEAR. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).

Severity (CVSS 4.0)4.3Medium
Exploit odds (30 days)0.2%top 84.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.

Affected products (as reported)

VendorProductVersions
NETGEAR CBR750 0 – before v4.6.14.4
NETGEAR EX6120 0 – through 1.0.0.72
NETGEAR EX6130 0 – through 1.0.0.54
NETGEAR MR60 0 – before V1.1.7.128
NETGEAR MR70 0 – before V1.0.3.28
NETGEAR MR80 0 – before V1.1.7.6
NETGEAR MS60 0 – before V1.1.7.128
NETGEAR MS70 0 – before V1.0.3.28
NETGEAR MS80 0 – before V1.1.7.6
NETGEAR RAX15 0 – through 1.0.18.144
NETGEAR RAX20 0 – through 1.0.18.144
NETGEAR RAX200 0 – through 1.0.11.148
NETGEAR RAX35v2 0 – before V1.0.11.112
NETGEAR RAX38v2 0 – before V1.0.11.112
NETGEAR RAX40v2 0 – before V1.0.11.112
NETGEAR RAX42 0 – before V1.0.11.112
NETGEAR RAX43 0 – before V1.0.11.112
NETGEAR RAX45 0 – before V1.0.11.112
NETGEAR RAX48 0 – before V1.0.11.112
NETGEAR RAX50 0 – before V1.0.11.112
NETGEAR RAX50S 0 – before V1.0.11.112
NETGEAR RAX75 0 – through 1.0.11.148
NETGEAR RAX80 0 – through 1.0.11.148
NETGEAR RAXE450 0 – before V1.0.10.86
NETGEAR RAXE500 0 – before V1.0.10.86
NETGEAR RBR750 0 – before V4.6.14.3
NETGEAR RBR840 0 – before V4.6.14.3
NETGEAR RBR850 0 – before V4.6.14.3
NETGEAR RBRE960 0 – before V6.3.7.5
NETGEAR RBS750 0 – before V4.6.14.3

Weakness: CWE-15 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/R:U/V:D/RE:L/U:Amber

References