Insufficient input validation in certain NETGEAR routers
Priority LOW 19CWE-20Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00229 13th percentileScored 2026-11-07
Fix Fixed MR60 (NETGEAR): V1.1.7.132MR70 (NETGEAR): V1.0.3.28+24 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| NETGEAR | MR60 | before V1.1.7.132 | V1.1.7.132 | Patch available | CNA |
| NETGEAR | MR70 | before V1.0.3.28 | V1.0.3.28 | Patch available | CNA |
| NETGEAR | MR80 | before V1.1.7.14 | V1.1.7.14 | Patch available | CNA |
| NETGEAR | MS60 | before V1.1.7.132 | V1.1.7.132 | Patch available | CNA |
| NETGEAR | MS70 | before V1.0.3.28 | V1.0.3.28 | Patch available | CNA |
| NETGEAR | MS80 | before V1.1.7.14 | V1.1.7.14 | Patch available | CNA |
| NETGEAR | R6400v2 | before V1.0.4.128 | V1.0.4.128 | Patch available | CNA |
| NETGEAR | R6700v3 | before V1.0.4.128 | V1.0.4.128 | Patch available | CNA |
| NETGEAR | R6900P | before V1.3.3.152 | V1.3.3.152 | Patch available | CNA |
| NETGEAR | R7000 | before V1.0.11.216 | V1.0.11.216 | Patch available | CNA |
| NETGEAR | R7000P | before V1.3.3.152 | V1.3.3.152 | Patch available | CNA |
| NETGEAR | R7960P | before V1.4.4.92 | V1.4.4.92 | Patch available | CNA |
| NETGEAR | R8000P | before V1.4.4.92 | V1.4.4.92 | Patch available | CNA |
| NETGEAR | R8500 | up to 1.0.2.160 | — | No fix listed | CNA |
| NETGEAR | RAX20 | before V1.0.18.144 | V1.0.18.144 | Patch available | CNA |
| NETGEAR | RAX35v2 | before V1.0.16.132 | V1.0.16.132 | Patch available | CNA |
| NETGEAR | RAX40v2 | before V1.0.12.118 | V1.0.12.118 | Patch available | CNA |
| NETGEAR | RAX41 | before V1.0.12.118 | V1.0.12.118 | Patch available | CNA |
| NETGEAR | RAX42 | before V1.0.12.118 | V1.0.12.118 | Patch available | CNA |
| NETGEAR | RAX43 | before V1.0.12.120 | V1.0.12.120 | Patch available | CNA |
| NETGEAR | RAX45 | before V1.0.12.118 | V1.0.12.118 | Patch available | CNA |
| NETGEAR | RAX48 | before V1.0.12.118 | V1.0.12.118 | Patch available | CNA |
| NETGEAR | RAX50 | before V1.0.12.120 | V1.0.12.120 | Patch available | CNA |
| NETGEAR | RAX50S | before V1.0.12.120 | V1.0.12.120 | Patch available | CNA |
| NETGEAR | RAXE450 | before V1.0.10.86 | V1.0.10.86 | Patch available | CNA |
| NETGEAR | RAXE500 | before V1.0.10.86 | V1.0.10.86 | Patch available | CNA |
| NETGEAR | XR1000 | before V1.0.0.68 | V1.0.0.68 | Patch available | CNA |
- MR60 VendorNETGEAR Affected before V1.1.7.132 Fixed in V1.1.7.132 Patch available CNA
- MR70 VendorNETGEAR Affected before V1.0.3.28 Fixed in V1.0.3.28 Patch available CNA
- MR80 VendorNETGEAR Affected before V1.1.7.14 Fixed in V1.1.7.14 Patch available CNA
- MS60 VendorNETGEAR Affected before V1.1.7.132 Fixed in V1.1.7.132 Patch available CNA
- MS70 VendorNETGEAR Affected before V1.0.3.28 Fixed in V1.0.3.28 Patch available CNA
- MS80 VendorNETGEAR Affected before V1.1.7.14 Fixed in V1.1.7.14 Patch available CNA
- R6400v2 VendorNETGEAR Affected before V1.0.4.128 Fixed in V1.0.4.128 Patch available CNA
- R6700v3 VendorNETGEAR Affected before V1.0.4.128 Fixed in V1.0.4.128 Patch available CNA
- R6900P VendorNETGEAR Affected before V1.3.3.152 Fixed in V1.3.3.152 Patch available CNA
- R7000 VendorNETGEAR Affected before V1.0.11.216 Fixed in V1.0.11.216 Patch available CNA
- R7000P VendorNETGEAR Affected before V1.3.3.152 Fixed in V1.3.3.152 Patch available CNA
- R7960P VendorNETGEAR Affected before V1.4.4.92 Fixed in V1.4.4.92 Patch available CNA
- R8000P VendorNETGEAR Affected before V1.4.4.92 Fixed in V1.4.4.92 Patch available CNA
- R8500 VendorNETGEAR Affected up to 1.0.2.160 Fixed in — No fix listed CNA
- RAX20 VendorNETGEAR Affected before V1.0.18.144 Fixed in V1.0.18.144 Patch available CNA
- RAX35v2 VendorNETGEAR Affected before V1.0.16.132 Fixed in V1.0.16.132 Patch available CNA
- RAX40v2 VendorNETGEAR Affected before V1.0.12.118 Fixed in V1.0.12.118 Patch available CNA
- RAX41 VendorNETGEAR Affected before V1.0.12.118 Fixed in V1.0.12.118 Patch available CNA
- RAX42 VendorNETGEAR Affected before V1.0.12.118 Fixed in V1.0.12.118 Patch available CNA
- RAX43 VendorNETGEAR Affected before V1.0.12.120 Fixed in V1.0.12.120 Patch available CNA
- RAX45 VendorNETGEAR Affected before V1.0.12.118 Fixed in V1.0.12.118 Patch available CNA
- RAX48 VendorNETGEAR Affected before V1.0.12.118 Fixed in V1.0.12.118 Patch available CNA
- RAX50 VendorNETGEAR Affected before V1.0.12.120 Fixed in V1.0.12.120 Patch available CNA
- RAX50S VendorNETGEAR Affected before V1.0.12.120 Fixed in V1.0.12.120 Patch available CNA
- RAXE450 VendorNETGEAR Affected before V1.0.10.86 Fixed in V1.0.10.86 Patch available CNA
- RAXE500 VendorNETGEAR Affected before V1.0.10.86 Fixed in V1.0.10.86 Patch available CNA
- XR1000 VendorNETGEAR Affected before V1.0.0.68 Fixed in V1.0.0.68 Patch available CNA
CPE configurations NVD · 54
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:* | before 1.1.7.132 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:mr70_firmware:*:*:*:*:*:*:*:* | before 1.0.3.28 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:mr70:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:mr80_firmware:*:*:*:*:*:*:*:* | before 1.1.7.14 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:mr80:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:* | before 1.1.7.132 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:ms70_firmware:*:*:*:*:*:*:*:* | before 1.0.3.28 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:ms70:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
- cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:* Versions before 1.1.7.132 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:mr70_firmware:*:*:*:*:*:*:*:* Versions before 1.0.3.28 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:mr70:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:mr80_firmware:*:*:*:*:*:*:*:* Versions before 1.1.7.14 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:mr80:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:* Versions before 1.1.7.132 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:ms70_firmware:*:*:*:*:*:*:*:* Versions before 1.0.3.28 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:ms70:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
Show 44 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:netgear:ms80_firmware:*:*:*:*:*:*:*:* | before 1.1.7.14 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:ms80:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:r6400v2_firmware:*:*:*:*:*:*:*:* | before 1.0.4.128 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r6400v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:r6700v3_firmware:*:*:*:*:*:*:*:* | before 1.0.4.128 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r6700v3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:* | before 1.3.3.152 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:* | before 1.0.11.216 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:* | before 1.3.3.152 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:r7960p_firmware:*:*:*:*:*:*:*:* | before 1.4.4.92 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r7960p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:* | before 1.4.4.92 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:r8500_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:* | before 1.0.18.144 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax35v2_firmware:*:*:*:*:*:*:*:* | before 1.0.16.132 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax35v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax40v2_firmware:*:*:*:*:*:*:*:* | before 1.0.12.118 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax40v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax41_firmware:*:*:*:*:*:*:*:* | before 1.0.12.118 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax41:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax42_firmware:*:*:*:*:*:*:*:* | before 1.0.12.118 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax42:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:* | before 1.0.12.120 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:* | before 1.0.12.118 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax48_firmware:*:*:*:*:*:*:*:* | before 1.0.12.118 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax48:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:* | before 1.0.12.120 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax50s_firmware:*:*:*:*:*:*:*:* | before 1.0.12.120 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax50s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:raxe450_firmware:*:*:*:*:*:*:*:* | before 1.0.10.86 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:raxe450:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:raxe500_firmware:*:*:*:*:*:*:*:* | before 1.0.10.86 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:raxe500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:xr1000_firmware:*:*:*:*:*:*:*:* | before 1.0.0.68 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:xr1000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
- cpe:2.3:o:netgear:ms80_firmware:*:*:*:*:*:*:*:* Versions before 1.1.7.14 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:ms80:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:r6400v2_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.128 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r6400v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:r6700v3_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.128 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r6700v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:* Versions before 1.3.3.152 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:* Versions before 1.0.11.216 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:* Versions before 1.3.3.152 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:r7960p_firmware:*:*:*:*:*:*:*:* Versions before 1.4.4.92 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r7960p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:* Versions before 1.4.4.92 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:r8500_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:* Versions before 1.0.18.144 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax35v2_firmware:*:*:*:*:*:*:*:* Versions before 1.0.16.132 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax35v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax40v2_firmware:*:*:*:*:*:*:*:* Versions before 1.0.12.118 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax40v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax41_firmware:*:*:*:*:*:*:*:* Versions before 1.0.12.118 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax41:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax42_firmware:*:*:*:*:*:*:*:* Versions before 1.0.12.118 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax42:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:* Versions before 1.0.12.120 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:* Versions before 1.0.12.118 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax48_firmware:*:*:*:*:*:*:*:* Versions before 1.0.12.118 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax48:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:* Versions before 1.0.12.120 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax50s_firmware:*:*:*:*:*:*:*:* Versions before 1.0.12.120 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax50s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:raxe450_firmware:*:*:*:*:*:*:*:* Versions before 1.0.10.86 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:raxe450:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:raxe500_firmware:*:*:*:*:*:*:*:* Versions before 1.0.10.86 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:raxe500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:xr1000_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0.68 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:xr1000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
Remediation
- Fix · CNA MR60 (NETGEAR) Fixed in V1.1.7.132
- Fix · CNA MR70 (NETGEAR) Fixed in V1.0.3.28
- Fix · CNA MR80 (NETGEAR) Fixed in V1.1.7.14
- Fix · CNA MS60 (NETGEAR) Fixed in V1.1.7.132
- Fix · CNA MS70 (NETGEAR) Fixed in V1.0.3.28
- Fix · CNA MS80 (NETGEAR) Fixed in V1.1.7.14
- Fix · CNA R6400v2 (NETGEAR) Fixed in V1.0.4.128
- Fix · CNA R6700v3 (NETGEAR) Fixed in V1.0.4.128
- Fix · CNA R6900P (NETGEAR) Fixed in V1.3.3.152
- Fix · CNA R7000 (NETGEAR) Fixed in V1.0.11.216
- Fix · CNA R7000P (NETGEAR) Fixed in V1.3.3.152
- Fix · CNA R7960P (NETGEAR) Fixed in V1.4.4.92
- Fix · CNA R8000P (NETGEAR) Fixed in V1.4.4.92
- Fix · CNA RAX20 (NETGEAR) Fixed in V1.0.18.144
- Fix · CNA RAX35v2 (NETGEAR) Fixed in V1.0.16.132
- Fix · CNA RAX40v2 (NETGEAR) Fixed in V1.0.12.118
- Fix · CNA RAX41 (NETGEAR) Fixed in V1.0.12.118
- Fix · CNA RAX42 (NETGEAR) Fixed in V1.0.12.118
- Fix · CNA RAX43 (NETGEAR) Fixed in V1.0.12.120
- Fix · CNA RAX45 (NETGEAR) Fixed in V1.0.12.118
- Fix · CNA RAX48 (NETGEAR) Fixed in V1.0.12.118
- Fix · CNA RAX50 (NETGEAR) Fixed in V1.0.12.120
- Fix · CNA RAX50S (NETGEAR) Fixed in V1.0.12.120
- Fix · CNA RAXE450 (NETGEAR) Fixed in V1.0.10.86
- Fix · CNA RAXE500 (NETGEAR) Fixed in V1.0.10.86
- Fix · CNA XR1000 (NETGEAR) Fixed in V1.0.0.68
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
NETGEAR MR60, MR70 and 25 more products — kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory
6 records Highest priority Priority LOW 6 LOW
Other records, highest priority first
- TI-2026-08098 Insufficient input validation in certain NETGEAR routersPriority LOW 33
- TI-2026-08095 Certain NETGEAR routers allow authenticated administrators to gain unintended control of the routerPriority LOW 22
- TI-2026-00280 Certain NETGEAR devices allow administrators to tamper with systemPriority LOW 20
Timeline
- 2026-10-02 Threatist record created from CVE-2026-0417
- 2026-10-03 Alias added: GHSA-gp45-6q59-r2fj
References
Patch 27
- https://www.netgear.com/support/product/mr70/
- https://www.netgear.com/support/product/mr80/
- https://www.netgear.com/support/product/mr60/
- https://www.netgear.com/support/product/ms60/
- https://www.netgear.com/support/product/ms80/
- https://www.netgear.com/support/product/r6400v2/
- https://www.netgear.com/support/product/ms70/
- https://www.netgear.com/support/product/r6700v3/
- https://www.netgear.com/support/product/r7000/
- https://www.netgear.com/support/product/r6900p/
- https://www.netgear.com/support/product/r8000p/
- https://www.netgear.com/support/product/r8500/
- https://www.netgear.com/support/product/rax40v2/
- https://www.netgear.com/support/product/rax42/
- https://www.netgear.com/support/product/rax35v2/
- https://www.netgear.com/support/product/rax41/
- https://www.netgear.com/support/product/rax20/
- https://www.netgear.com/support/product/rax43/
- https://www.netgear.com/support/product/r7960p/
- https://www.netgear.com/support/product/r7000p/
- https://www.netgear.com/support/product/rax45/
- https://www.netgear.com/support/product/rax48/
- https://www.netgear.com/support/product/raxe450/
- https://www.netgear.com/support/product/rax50s/
- https://www.netgear.com/support/product/xr1000/
- https://www.netgear.com/support/product/rax50/
- https://www.netgear.com/support/product/raxe500/
More NETGEAR Mr60 Firmware vulnerabilities
- TI-2023-18149 Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote… CVSS 3.1CRITICAL 9.8
- TI-2022-23936 NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer… CVSS 3.1CRITICAL 9.8
- TI-2021-20709 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1CRITICAL 9.8
- TI-2021-20699 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1CRITICAL 9.8
- TI-2021-20708 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1CRITICAL 9.8
- TI-2021-20707 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1CRITICAL 9.8
Sources
- CVE-2026-0417 · CVE Program
- CVE-2026-0417 · NVD
- FIRST EPSS
- GHSA-gp45-6q59-r2fj · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences