What’s Vulnerable › Vulnerabilities

CVE-2026-107918: Insufficient input validation vulnerability in NETGEAR R7300

• Severity: medium (CVSS 4.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-13 · updated 2026-10-16
• Weakness: CWE-20

Description

Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.

Affected products

• NETGEAR R7300DST: through V1 1.0.0.74

References

• https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory
• https://www.netgear.com/support/product/r7300dst

Get alerted when CVE-2026-107918 or the next vulnerability affects your stack