Vulnerability · Published Nov 11, 2025 · Assigned by NETGEAR
CVE-2025-12942Improper input validation in NETGEAR R6260 and R6850
Medium 4.8
In plain English
A medium-severity improper input validation in R6260 from NETGEAR. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Severity (CVSS 4.0)4.8Medium
Exploit odds (30 days)0.3%top 75.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform command execution.This issue affects R6260: through 1.1.0.86; R6850: through 1.1.0.86.
Affected products (as reported)
Weakness: CWE-20 · Vector: CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:L/U:Amber
References
- https://www.netgear.com/support/product/r6850 product, patch
- https://www.netgear.com/support/product/r6260 patch, product
- https://kb.netgear.com/000070355/NETGEAR-Security-Advisories-November-2025 vendor-advisory