Back to CVE records
Medium 4.5Published Jun 9, 2026
CVE-2026-0418Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.
Updated under an hour ago ()
Does this affect you?
It affects netgear cbr750_firmware and 34 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.
- CVSS
- 4.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
- Weakness (CWE)
- CWE-15, CWE-610
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Not given
- NVD analysis
- Analyzed
- Record last updated
- Jul 23, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
netgear cbr750_firmware netgear:cbr750_firmware | before 4.6.14.4 | NVD |
netgear ex6120_firmware netgear:ex6120_firmware | all versions | NVD |
netgear ex6130_firmware netgear:ex6130_firmware | all versions | NVD |
netgear mr60_firmware netgear:mr60_firmware | before 1.1.7.128 | NVD |
netgear mr70_firmware netgear:mr70_firmware | before 1.0.3.28 | NVD |
netgear mr80_firmware netgear:mr80_firmware | before 1.1.7.6 | NVD |
netgear ms60_firmware netgear:ms60_firmware | before 1.1.7.128 | NVD |
netgear ms70_firmware netgear:ms70_firmware | before 1.0.3.28 | NVD |
netgear ms80_firmware netgear:ms80_firmware | before 1.1.7.6 | NVD |
netgear rax15_firmware netgear:rax15_firmware | all versions | NVD |
netgear rax20_firmware netgear:rax20_firmware | all versions | NVD |
netgear rax200_firmware netgear:rax200_firmware | all versions | NVD |
netgear rax35v2_firmware netgear:rax35v2_firmware | before 1.0.11.112 | NVD |
netgear rax38v2_firmware netgear:rax38v2_firmware | before 1.0.11.112 | NVD |
netgear rax40v2_firmware netgear:rax40v2_firmware | before 1.0.11.112 | NVD |
netgear rax42_firmware netgear:rax42_firmware | before 1.0.11.112 | NVD |
netgear rax43_firmware netgear:rax43_firmware | before 1.0.11.112 | NVD |
netgear rax45_firmware netgear:rax45_firmware | before 1.0.11.112 | NVD |
netgear rax48_firmware netgear:rax48_firmware | before 1.0.11.112 | NVD |
netgear rax50_firmware netgear:rax50_firmware | before 1.0.11.112 | NVD |
netgear rax50s_firmware netgear:rax50s_firmware | before 1.0.11.112 | NVD |
netgear rax75_firmware netgear:rax75_firmware | all versions | NVD |
netgear rax80_firmware netgear:rax80_firmware | all versions | NVD |
netgear raxe450_firmware netgear:raxe450_firmware | before 1.0.10.86 | NVD |
netgear raxe500_firmware netgear:raxe500_firmware | before 1.0.10.86 | NVD |
netgear rbr750_firmware netgear:rbr750_firmware | before 4.6.14.3 | NVD |
netgear rbr840_firmware netgear:rbr840_firmware | before 4.6.14.3 | NVD |
netgear rbr850_firmware netgear:rbr850_firmware | before 4.6.14.3 | NVD |
netgear rbre960_firmware netgear:rbre960_firmware | before 6.3.7.5 | NVD |
netgear rbs750_firmware netgear:rbs750_firmware | before 4.6.14.3 | NVD |
netgear rbs840_firmware netgear:rbs840_firmware | before 4.6.14.3 | NVD |
netgear rbs850_firmware netgear:rbs850_firmware | before 4.6.14.3 | NVD |
netgear rbse960_firmware netgear:rbse960_firmware | before 6.3.7.5 | NVD |
netgear rs700_firmware netgear:rs700_firmware | before 1.0.7.66 | NVD |
netgear xr1000_firmware netgear:xr1000_firmware | before 1.0.0.68 | NVD |
References
- https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisoryvendor-advisory
- https://www.netgear.com/support/product/cbr750/product
- https://www.netgear.com/support/product/ex6120/product
- https://www.netgear.com/support/product/ex6130/product
- https://www.netgear.com/support/product/mr60/product
- https://www.netgear.com/support/product/mr70/product
- https://www.netgear.com/support/product/mr80/product
- https://www.netgear.com/support/product/ms60/product
- https://www.netgear.com/support/product/ms70/product
- https://www.netgear.com/support/product/ms80/product
- https://www.netgear.com/support/product/rax15/product
- https://www.netgear.com/support/product/rax20/product
- https://www.netgear.com/support/product/rax200/product
- https://www.netgear.com/support/product/rax35v2/product
- https://www.netgear.com/support/product/rax38v2/product
- https://www.netgear.com/support/product/rax40v2/product
- https://www.netgear.com/support/product/rax42/product
- https://www.netgear.com/support/product/rax43/product
- https://www.netgear.com/support/product/rax45/product
- https://www.netgear.com/support/product/rax48/product
- https://www.netgear.com/support/product/rax50/product
- https://www.netgear.com/support/product/rax50s/product
- https://www.netgear.com/support/product/rax75/product
- https://www.netgear.com/support/product/rax80/product
- https://www.netgear.com/support/product/raxe450/product
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.