Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2026-0416

Improper input validation in certain NETGEAR routers allows unauthorized modification of protected router functionality

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NETGEAR

Description

An insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated administrator with local network access to submit crafted input that bypasses intended management interface restrictions, resulting in unauthorized modification of protected router software or functionality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NETGEAR RAXE450

Default version status: unaffected

  • V1.0.12.96 to < V1.2.14.114affected

NETGEAR RAXE500

Default version status: unaffected

  • V1.0.12.96 to < V1.2.14.114affected

References