CVE-2026-0414

Analyzed Analyzed - Analysis Complete

Authenticated Admin Command Injection in NETGEAR Router Firmware

Publication date: 2026-06-09

Last updated on: 2026-06-18

Assigner: Netgear, Inc.

Description

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-09

Last Modified

2026-06-18

Generated

2026-06-30

AI Q&A

2026-06-10

EPSS Evaluated

2026-06-28

NVD

CVE-2026-0414

EUVD

EUVD-2026-35463

Affected Vendors & Products

Vendor	Product	Version / Range
netgear	rbe970_firmware	to 9.12.4.9 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-94	The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

Mitigation Strategies

This vulnerability affects certain NETGEAR routers and allows authenticated administrators on the local network to make unauthorized modifications to router software and functionality.

To mitigate this vulnerability, it is recommended to ensure that your router firmware is updated to the latest version provided by NETGEAR.

Executive Summary

This vulnerability is an insufficient input validation issue found in certain NETGEAR router models. It allows authenticated administrators who are connected to the local network to make unauthorized modifications to the router's software and functionality.

Impact Analysis

The vulnerability could allow an authenticated administrator on the local network to alter the router's software and functionality without proper authorization. This could lead to potential security risks such as unauthorized changes to network configurations, introduction of malicious code, or disruption of network services.

Hi! I’m here to help you understand CVE-2026-0414. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70