Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-0417

Insufficient input validation in certain NETGEAR routers

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in V1.1.7.132, V1.0.3.28, V1.1.7.14, V1.0.4.128, V1.3.3.152, and 8 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • NETGEAR MR60

    fixed in V1.1.7.132

  • NETGEAR MR70

    fixed in V1.0.3.28

  • NETGEAR MR80

    fixed in V1.1.7.14

  • NETGEAR MS60

    fixed in V1.1.7.132

  • NETGEAR MS70

    fixed in V1.0.3.28

  • NETGEAR MS80

    fixed in V1.1.7.14

  • NETGEAR R6400v2

    fixed in V1.0.4.128

  • NETGEAR R6700v3

    fixed in V1.0.4.128

  • NETGEAR R6900P

    fixed in V1.3.3.152

  • NETGEAR R7000

    fixed in V1.0.11.216

  • NETGEAR R7000P

    fixed in V1.3.3.152

  • NETGEAR R7960P

    fixed in V1.4.4.92

  • NETGEAR R8000P

    fixed in V1.4.4.92

  • NETGEAR R8500

    through 1.0.2.160

  • NETGEAR RAX20

    fixed in V1.0.18.144

  • NETGEAR RAX35v2

    fixed in V1.0.16.132

  • NETGEAR RAX40v2

    fixed in V1.0.12.118

  • NETGEAR RAX41

    fixed in V1.0.12.118

  • NETGEAR RAX42

    fixed in V1.0.12.118

  • NETGEAR RAX43

    fixed in V1.0.12.120

  • NETGEAR RAX45

    fixed in V1.0.12.118

  • NETGEAR RAX48

    fixed in V1.0.12.118

  • NETGEAR RAX50

    fixed in V1.0.12.120

  • NETGEAR RAX50S

    fixed in V1.0.12.120

  • NETGEAR RAXE450

    fixed in V1.0.10.86

  • NETGEAR RAXE500

    fixed in V1.0.10.86

  • NETGEAR XR1000

    fixed in V1.0.0.68

References 25

netgear.com