What’s Vulnerable › Vulnerabilities
CVE-2026-0410: Insufficient input validation in certain NETGEAR routers
- Severity: medium (CVSS 4.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-06-09 · updated 2026-07-23
- Weakness: CWE-20
Description
Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.
Affected products
- NETGEAR R7000: before 1.0.11.216 — fixed in 1.0.11.216
- NETGEAR Rax20 Firmware: before 1.0.18.144 — fixed in 1.0.18.144
- NETGEAR Rax35V2 Firmware: before 1.0.16.132 — fixed in 1.0.16.132
- NETGEAR Rax41 Firmware: before 1.0.16.132 — fixed in 1.0.16.132
- NETGEAR Rax41V2 Firmware: before 1.1.4.28 — fixed in 1.1.4.28
- NETGEAR Rax42 Firmware: before 1.0.16.132 — fixed in 1.0.16.132
- NETGEAR Rax42V2 Firmware: before 1.1.4.28 — fixed in 1.1.4.28
- Netgear RAX43: before 1.0.16.132 — fixed in 1.0.16.132
- NETGEAR Rax43V2 Firmware: before 1.1.4.28 — fixed in 1.1.4.28
- NETGEAR Rax45 Firmware: before 1.0.16.132 — fixed in 1.0.16.132
- NETGEAR Rax49S Firmware: before 1.1.4.28 — fixed in 1.1.4.28
- NETGEAR Rax50 Firmware: before 1.0.16.132 — fixed in 1.0.16.132
- NETGEAR Rax50S Firmware: before 1.0.16.132 — fixed in 1.0.16.132
- NETGEAR Rax50V2 Firmware: before 1.1.4.28 — fixed in 1.1.4.28
- NETGEAR Rax54Sv2 Firmware: before 1.1.4.28 — fixed in 1.1.4.28
- NETGEAR Raxe450 Firmware: before 1.2.14.114 — fixed in 1.2.14.114
- NETGEAR Raxe500 Firmware: before 1.2.14.114 — fixed in 1.2.14.114
- NETGEAR Xr1000 Firmware: before 1.1.0.22 — fixed in 1.1.0.22
- NETGEAR XR1000v2: before 1.1.0.22 — fixed in 1.1.0.22
How to fix
Upgrade to a fixed version: NETGEAR R7000 1.0.11.216; NETGEAR Rax20 Firmware 1.0.18.144; NETGEAR Rax35V2 Firmware 1.0.16.132; NETGEAR Rax41 Firmware 1.0.16.132; NETGEAR Rax41V2 Firmware 1.1.4.28; NETGEAR Rax42 Firmware 1.0.16.132; NETGEAR Rax42V2 Firmware 1.1.4.28; Netgear RAX43 1.0.16.132; NETGEAR Rax43V2 Firmware 1.1.4.28; NETGEAR Rax45 Firmware 1.0.16.132; NETGEAR Rax49S Firmware 1.1.4.28; NETGEAR Rax50 Firmware 1.0.16.132. Check the vendor advisory for mitigations.
References
- https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory
- https://www.netgear.com/support/product/r7000/
- https://www.netgear.com/support/product/rax20/
- https://www.netgear.com/support/product/rax35v2/
- https://www.netgear.com/support/product/rax41/
- https://www.netgear.com/support/product/rax41v2/
- https://www.netgear.com/support/product/rax42/
- https://www.netgear.com/support/product/rax42v2/
- https://www.netgear.com/support/product/rax43/
- https://www.netgear.com/support/product/rax43v2/
- https://www.netgear.com/support/product/rax45/
- https://www.netgear.com/support/product/rax49s/
Get alerted when CVE-2026-0410 or the next vulnerability affects your stack