CVE-2026-0416

Awaiting Analysis Awaiting Analysis - Queue

Authenticated Admin Network Router Misconfiguration

Publication date: 2026-06-09

Last updated on: 2026-06-18

Assigner: Netgear, Inc.

Description

An insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated administrator with local network access to submit crafted input that bypasses intended management interface restrictions, resulting in unauthorized modification of protected router software or functionality.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-09

Last Modified

2026-06-18

Generated

2026-06-30

AI Q&A

2026-06-09

EPSS Evaluated

2026-06-28

NVD

CVE-2026-0416

EUVD

EUVD-2026-35457

Affected Vendors & Products

Vendor	Product	Version / Range
netgear	raxe450_firmware	to 1.2.14.114 (exc)
netgear	raxe500_firmware	to 1.2.14.114 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This vulnerability allows authenticated administrators who are connected to the local network to modify the router's functionality beyond what is intended through the standard management interface.

Impact Analysis

The vulnerability can lead to unauthorized changes in router behavior by administrators, potentially compromising network security or stability by enabling actions outside the intended management capabilities.

Mitigation Strategies

Authenticated administrators connected to the local network can modify router functionality beyond what is intended through the standard management interface.

Since the vulnerability involves modification of router functionality by authenticated local administrators, immediate mitigation steps include restricting administrative access to trusted personnel only and ensuring that only authorized users can connect to the local network.

Although no specific firmware updates or patches are mentioned for CVE-2026-0416, it is generally recommended to keep router firmware up to date and monitor for any official advisories from the vendor.

Hi! I’m here to help you understand CVE-2026-0416. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70