CVE-2026-0410

Tuesday, June 09, 2026

1.9

CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber

Summary

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.

Affected Software

Vendor	Product	Version Range	Status
NETGEAR	R7000	`0 < V1.0.11.216`	affected
NETGEAR	RAX20	`0 < V1.0.18.144`	affected
NETGEAR	RAX35v2	`0 < V1.0.16.132`	affected
NETGEAR	RAX41	`0 < V1.0.16.132`	affected
NETGEAR	RAX41v2	`0 < V1.1.4.28`	affected
NETGEAR	RAX42	`0 < V1.0.16.132`	affected
NETGEAR	RAX42v2	`0 < V1.1.4.28`	affected
NETGEAR	RAX43	`0 < V1.0.16.132`	affected
NETGEAR	RAX43v2	`0 < V1.1.4.28`	affected
NETGEAR	RAX45	`0 < V1.0.16.132`	affected
NETGEAR	RAX49S	`0 < V1.1.4.28`	affected
NETGEAR	RAX50	`0 < V1.0.16.132`	affected
NETGEAR	RAX50S	`0 < V1.0.16.132`	affected
NETGEAR	RAX50v2	`0 < V1.1.4.28`	affected
NETGEAR	RAX54Sv2	`0 < V1.1.4.28`	affected
NETGEAR	RAX54v2	`0 < V1.1.4.28`	affected
NETGEAR	RAXE450	`0 < V1.2.14.114`	affected
NETGEAR	RAXE500	`0 < V1.2.14.114`	affected
NETGEAR	XR1000	`0 < V1.1.0.22`	affected
NETGEAR	XR1000v2	`0 < V1.1.0.22`	affected

Weaknesses

CWE-20: CWE-20 Insufficient input validation

ADP Enrichment

CISA ADP Vulnrichment

SSVC:
Exploitation: none
- Automatable: no
- Technical Impact: partial

References

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.