Certain NETGEAR devices allow administrators to tamper with system

4.3 / 10

MEDIUM

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/R:U/V:D/RE:L/U:Amber

Description

Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network
to tamper with the system.

Basic Information

ID CVE-2026-0418

Source NETGEAR

Published Jun 9, 2026 at 15:50

Affected Product

Vendor NETGEAR

Product CBR750

Affected Versions NETGEAR CBR750 0
NETGEAR EX6120 0
NETGEAR EX6130 0
NETGEAR MR60 0
NETGEAR MR70 0
NETGEAR MR80 0
NETGEAR MS60 0
NETGEAR MS70 0
NETGEAR MS80 0
NETGEAR RAX15 0
NETGEAR RAX20 0
NETGEAR RAX200 0
NETGEAR RAX35v2 0
NETGEAR RAX38v2 0
NETGEAR RAX40v2 0
NETGEAR RAX42 0
NETGEAR RAX43 0
NETGEAR RAX45 0
NETGEAR RAX48 0
NETGEAR RAX50 0
NETGEAR RAX50S 0
NETGEAR RAX75 0
NETGEAR RAX80 0
NETGEAR RAXE450 0
NETGEAR RAXE500 0
NETGEAR RBR750 0
NETGEAR RBR840 0
NETGEAR RBR850 0
NETGEAR RBRE960 0
NETGEAR RBS750 0
NETGEAR RBS840 0
NETGEAR RBS850 0
NETGEAR RBSE960 0
NETGEAR RS700 0
NETGEAR XR1000 0

CWE Classification

CWE-15

References

{
    "lastseen": "",
    "description": "Insufficient configuration management in the listed devices\u00a0allows authenticated administrators connected to the local network\nto tamper with the system.",
    "published": "2026-06-09T15:50:50.069Z",
    "modified": "2026-06-09T15:50:50.069Z",
    "type": "cve",
    "title": "Certain NETGEAR devices allow administrators to tamper with system",
    "source": "NETGEAR",
    "references": "https://www.netgear.com/support/product/cbr750/\nhttps://www.netgear.com/support/product/rax15/\nhttps://www.netgear.com/support/product/ex6120/\nhttps://www.netgear.com/support/product/rax200/\nhttps://www.netgear.com/support/product/rax38v2/\nhttps://www.netgear.com/support/product/rax75/\nhttps://www.netgear.com/support/product/mr60/\nhttps://www.netgear.com/support/product/rax80/\nhttps://www.netgear.com/support/product/rbr840/\nhttps://www.netgear.com/support/product/rbr750/\nhttps://www.netgear.com/support/product/rbs750/\nhttps://www.netgear.com/support/product/ex6130/\nhttps://www.netgear.com/support/product/rbr850/\nhttps://www.netgear.com/support/product/rbs840/\nhttps://www.netgear.com/support/product/rbs850/\nhttps://www.netgear.com/support/product/ms60/\nhttps://www.netgear.com/support/product/rs700/\nhttps://www.netgear.com/support/product/mr70/\nhttps://www.netgear.com/support/product/mr80/\nhttps://www.netgear.com/support/product/ms70/\nhttps://www.netgear.com/support/product/rax35v2/\nhttps://www.netgear.com/support/product/rax20/\nhttps://www.netgear.com/support/product/ms80/\nhttps://www.netgear.com/support/product/rax40v2/\nhttps://www.netgear.com/support/product/rax42/\nhttps://www.netgear.com/support/product/rax43/\nhttps://www.netgear.com/support/product/rax50/\nhttps://www.netgear.com/support/product/raxe500/\nhttps://www.netgear.com/support/product/rax48/\nhttps://www.netgear.com/support/product/rax50s/\nhttps://www.netgear.com/support/product/rbse960/\nhttps://www.netgear.com/support/product/raxe450/\nhttps://www.netgear.com/support/product/rax45/\nhttps://www.netgear.com/support/product/rbre960/\nhttps://www.netgear.com/support/product/xr1000/",
    "id": "CVE-2026-0418",
    "bulletinFamily": "",
    "cwe": [
        "CWE-15"
    ],
    "cvelist": null,
    "sourceData": "NETGEAR CBR750 0\nNETGEAR EX6120 0\nNETGEAR EX6130 0\nNETGEAR MR60 0\nNETGEAR MR70 0\nNETGEAR MR80 0\nNETGEAR MS60 0\nNETGEAR MS70 0\nNETGEAR MS80 0\nNETGEAR RAX15 0\nNETGEAR RAX20 0\nNETGEAR RAX200 0\nNETGEAR RAX35v2 0\nNETGEAR RAX38v2 0\nNETGEAR RAX40v2 0\nNETGEAR RAX42 0\nNETGEAR RAX43 0\nNETGEAR RAX45 0\nNETGEAR RAX48 0\nNETGEAR RAX50 0\nNETGEAR RAX50S 0\nNETGEAR RAX75 0\nNETGEAR RAX80 0\nNETGEAR RAXE450 0\nNETGEAR RAXE500 0\nNETGEAR RBR750 0\nNETGEAR RBR840 0\nNETGEAR RBR850 0\nNETGEAR RBRE960 0\nNETGEAR RBS750 0\nNETGEAR RBS840 0\nNETGEAR RBS850 0\nNETGEAR RBSE960 0\nNETGEAR RS700 0\nNETGEAR XR1000 0",
    "sourceHref": "",
    "cvss": {
        "score": 4.3,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/R:U/V:D/RE:L/U:Amber",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "CBR750",
    "version": "0",
    "vendor": "NETGEAR",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}

Certain NETGEAR devices allow administrators to tamper with system_CVE-2026-0418