CVE-2026-0415

Tuesday, June 09, 2026

4.3

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U

Summary

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

Affected Software

Vendor	Product	Version Range	Status
NETGEAR	RBE970	`0 < V9.12.4.9`	affected
NETGEAR	RBR750	`0 < V7.2.8.5`	affected
NETGEAR	RBR840	`0 < V7.2.8.5`	affected
NETGEAR	RBR850	`0 < V7.2.8.5`	affected
NETGEAR	RBR860	`0 < V7.2.8.5`	affected
NETGEAR	RBRE950	`0 < V7.2.8.5`	affected
NETGEAR	RBRE960	`0 < V7.2.8.5`	affected
NETGEAR	RBS750	`0 < V7.2.8.5`	affected
NETGEAR	RBS840	`0 < V7.2.8.5`	affected
NETGEAR	RBS850	`0 < V7.2.8.5`	affected
NETGEAR	RBS860	`0 < V7.2.8.5`	affected
NETGEAR	RBSE950	`0 < V7.2.8.5`	affected
NETGEAR	RBSE960	`0 < V7.2.8.5`	affected

Weaknesses

CWE-20: CWE-20 Insufficient input validation

ADP Enrichment

CISA ADP Vulnrichment

SSVC:
Exploitation: none
- Automatable: no
- Technical Impact: partial

References

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.