CVE-2026-0410

MediumCVSS 4.5/10Last modified Jul 23, 2026

Description

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.

Metrics

CVSS 3.1 4.5/10CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
NETGEARR7000< V1.0.11.216
NETGEARRAX20< V1.0.18.144
NETGEARRAX35v2< V1.0.16.132
NETGEARRAX41< V1.0.16.132
NETGEARRAX41v2< V1.1.4.28
NETGEARRAX42< V1.0.16.132
NETGEARRAX42v2< V1.1.4.28
NETGEARRAX43< V1.0.16.132
NETGEARRAX43v2< V1.1.4.28
NETGEARRAX45< V1.0.16.132
NETGEARRAX49S< V1.1.4.28
NETGEARRAX50< V1.0.16.132
NETGEARRAX50S< V1.0.16.132
NETGEARRAX50v2< V1.1.4.28
NETGEARRAX54Sv2< V1.1.4.28
NETGEARRAX54v2< V1.1.4.28
NETGEARRAXE450< V1.2.14.114
NETGEARRAXE500< V1.2.14.114
NETGEARXR1000< V1.1.0.22
NETGEARXR1000v2< V1.1.0.22

References

Timeline

Published
Jun 9, 2026
Last modified
Jul 23, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-04118.0An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to CVE-2026-04124.5Insufficient input validation vulnerability in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows adminisCVE-2026-04134.5A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connecCVE-2026-04144.5Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network CVE-2026-04154.5Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network CVE-2026-04164.5An insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated administrator with local nCVE-2026-04174.5Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local networkCVE-2026-04184.5Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper witCVE-2026-04198.0Insufficient input validation in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows users connected to thCVE-2026-04205.9An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attackeCVE-2026-04216.5A potential vulnerability was reported in the BIOS of L13 Gen 6, L13 Gen 6 2-in-1, L14 Gen 6, and L16 Gen 2 ThinkPads which could result in CVE-2026-04274.6Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to
CVE-2026-0410: Medium severity, CVSS 4.5 | Vulnix