PT-2026-47821 · NetGear · Mr60+26

Pjqwudi · Published 2026-06-09 · Updated 2026-06-09 · CVE-2026-0417

NVD

CVSS v4.0

4.3

Medium

Base vector

AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber

Insufficient input validation vulnerability in NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-0417

Affected Products

Mr60

Mr70

Mr80

Ms60

Ms70

Ms80

R6400V2

R6700V3

R6900P

R7000

R7000P

R7960P

R8000P

R8500

Rax20

Rax35V2

Rax40V2

Rax41

Rax42

Rax43

Rax45

Rax48

Rax50

Rax50S

Raxe450

Raxe500

Xr1000

References · 28

• https://netgear.com/support/product/rax45 · Patch
• https://netgear.com/support/product/r6900p · Patch
• https://netgear.com/support/product/rax41 · Patch
• https://netgear.com/support/product/rax43 · Patch
• https://netgear.com/support/product/ms70 · Patch
• https://netgear.com/support/product/mr80 · Patch
• https://netgear.com/support/product/r7960p · Patch
• https://netgear.com/support/product/rax20 · Patch
• https://netgear.com/support/product/xr1000 · Patch
• https://netgear.com/support/product/raxe500 · Patch
• https://netgear.com/support/product/ms80 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-0417 · Security Note
• https://netgear.com/support/product/rax40v2 · Patch
• https://netgear.com/support/product/r6400v2 · Patch
• https://netgear.com/support/product/mr70 · Patch