Certain NETGEAR devices allow administrators to tamper with system
Priority LOW 20CWE-15Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00245 15th percentileScored 2026-11-07
Fix Fixed CBR750 (NETGEAR): v4.6.14.4MR60 (NETGEAR): V1.1.7.128+26 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| NETGEAR | CBR750 | before v4.6.14.4 | v4.6.14.4 | Patch available | CNA |
| NETGEAR | EX6120 | up to 1.0.0.72 | — | No fix listed | CNA |
| NETGEAR | EX6130 | up to 1.0.0.54 | — | No fix listed | CNA |
| NETGEAR | MR60 | before V1.1.7.128 | V1.1.7.128 | Patch available | CNA |
| NETGEAR | MR70 | before V1.0.3.28 | V1.0.3.28 | Patch available | CNA |
| NETGEAR | MR80 | before V1.1.7.6 | V1.1.7.6 | Patch available | CNA |
| NETGEAR | MS60 | before V1.1.7.128 | V1.1.7.128 | Patch available | CNA |
| NETGEAR | MS70 | before V1.0.3.28 | V1.0.3.28 | Patch available | CNA |
| NETGEAR | MS80 | before V1.1.7.6 | V1.1.7.6 | Patch available | CNA |
| NETGEAR | RAX15 | up to 1.0.18.144 | — | No fix listed | CNA |
| NETGEAR | RAX20 | up to 1.0.18.144 | — | No fix listed | CNA |
| NETGEAR | RAX200 | up to 1.0.11.148 | — | No fix listed | CNA |
| NETGEAR | RAX35v2 | before V1.0.11.112 | V1.0.11.112 | Patch available | CNA |
| NETGEAR | RAX38v2 | before V1.0.11.112 | V1.0.11.112 | Patch available | CNA |
| NETGEAR | RAX40v2 | before V1.0.11.112 | V1.0.11.112 | Patch available | CNA |
| NETGEAR | RAX42 | before V1.0.11.112 | V1.0.11.112 | Patch available | CNA |
| NETGEAR | RAX43 | before V1.0.11.112 | V1.0.11.112 | Patch available | CNA |
| NETGEAR | RAX45 | before V1.0.11.112 | V1.0.11.112 | Patch available | CNA |
| NETGEAR | RAX48 | before V1.0.11.112 | V1.0.11.112 | Patch available | CNA |
| NETGEAR | RAX50 | before V1.0.11.112 | V1.0.11.112 | Patch available | CNA |
| NETGEAR | RAX50S | before V1.0.11.112 | V1.0.11.112 | Patch available | CNA |
| NETGEAR | RAX75 | up to 1.0.11.148 | — | No fix listed | CNA |
| NETGEAR | RAX80 | up to 1.0.11.148 | — | No fix listed | CNA |
| NETGEAR | RAXE450 | before V1.0.10.86 | V1.0.10.86 | Patch available | CNA |
| NETGEAR | RAXE500 | before V1.0.10.86 | V1.0.10.86 | Patch available | CNA |
| NETGEAR | RBR750 | before V4.6.14.3 | V4.6.14.3 | Patch available | CNA |
| NETGEAR | RBR840 | before V4.6.14.3 | V4.6.14.3 | Patch available | CNA |
| NETGEAR | RBR850 | before V4.6.14.3 | V4.6.14.3 | Patch available | CNA |
| NETGEAR | RBRE960 | before V6.3.7.5 | V6.3.7.5 | Patch available | CNA |
| NETGEAR | RBS750 | before V4.6.14.3 | V4.6.14.3 | Patch available | CNA |
| NETGEAR | RBS840 | before V4.6.14.3 | V4.6.14.3 | Patch available | CNA |
| NETGEAR | RBS850 | before V4.6.14.3 | V4.6.14.3 | Patch available | CNA |
| NETGEAR | RBSE960 | before V6.3.7.5 | V6.3.7.5 | Patch available | CNA |
| NETGEAR | RS700 | before V1.0.7.66 | V1.0.7.66 | Patch available | CNA |
| NETGEAR | XR1000 | before v1.0.0.68 | v1.0.0.68 | Patch available | CNA |
- CBR750 VendorNETGEAR Affected before v4.6.14.4 Fixed in v4.6.14.4 Patch available CNA
- EX6120 VendorNETGEAR Affected up to 1.0.0.72 Fixed in — No fix listed CNA
- EX6130 VendorNETGEAR Affected up to 1.0.0.54 Fixed in — No fix listed CNA
- MR60 VendorNETGEAR Affected before V1.1.7.128 Fixed in V1.1.7.128 Patch available CNA
- MR70 VendorNETGEAR Affected before V1.0.3.28 Fixed in V1.0.3.28 Patch available CNA
- MR80 VendorNETGEAR Affected before V1.1.7.6 Fixed in V1.1.7.6 Patch available CNA
- MS60 VendorNETGEAR Affected before V1.1.7.128 Fixed in V1.1.7.128 Patch available CNA
- MS70 VendorNETGEAR Affected before V1.0.3.28 Fixed in V1.0.3.28 Patch available CNA
- MS80 VendorNETGEAR Affected before V1.1.7.6 Fixed in V1.1.7.6 Patch available CNA
- RAX15 VendorNETGEAR Affected up to 1.0.18.144 Fixed in — No fix listed CNA
- RAX20 VendorNETGEAR Affected up to 1.0.18.144 Fixed in — No fix listed CNA
- RAX200 VendorNETGEAR Affected up to 1.0.11.148 Fixed in — No fix listed CNA
- RAX35v2 VendorNETGEAR Affected before V1.0.11.112 Fixed in V1.0.11.112 Patch available CNA
- RAX38v2 VendorNETGEAR Affected before V1.0.11.112 Fixed in V1.0.11.112 Patch available CNA
- RAX40v2 VendorNETGEAR Affected before V1.0.11.112 Fixed in V1.0.11.112 Patch available CNA
- RAX42 VendorNETGEAR Affected before V1.0.11.112 Fixed in V1.0.11.112 Patch available CNA
- RAX43 VendorNETGEAR Affected before V1.0.11.112 Fixed in V1.0.11.112 Patch available CNA
- RAX45 VendorNETGEAR Affected before V1.0.11.112 Fixed in V1.0.11.112 Patch available CNA
- RAX48 VendorNETGEAR Affected before V1.0.11.112 Fixed in V1.0.11.112 Patch available CNA
- RAX50 VendorNETGEAR Affected before V1.0.11.112 Fixed in V1.0.11.112 Patch available CNA
- RAX50S VendorNETGEAR Affected before V1.0.11.112 Fixed in V1.0.11.112 Patch available CNA
- RAX75 VendorNETGEAR Affected up to 1.0.11.148 Fixed in — No fix listed CNA
- RAX80 VendorNETGEAR Affected up to 1.0.11.148 Fixed in — No fix listed CNA
- RAXE450 VendorNETGEAR Affected before V1.0.10.86 Fixed in V1.0.10.86 Patch available CNA
- RAXE500 VendorNETGEAR Affected before V1.0.10.86 Fixed in V1.0.10.86 Patch available CNA
- RBR750 VendorNETGEAR Affected before V4.6.14.3 Fixed in V4.6.14.3 Patch available CNA
- RBR840 VendorNETGEAR Affected before V4.6.14.3 Fixed in V4.6.14.3 Patch available CNA
- RBR850 VendorNETGEAR Affected before V4.6.14.3 Fixed in V4.6.14.3 Patch available CNA
- RBRE960 VendorNETGEAR Affected before V6.3.7.5 Fixed in V6.3.7.5 Patch available CNA
- RBS750 VendorNETGEAR Affected before V4.6.14.3 Fixed in V4.6.14.3 Patch available CNA
- RBS840 VendorNETGEAR Affected before V4.6.14.3 Fixed in V4.6.14.3 Patch available CNA
- RBS850 VendorNETGEAR Affected before V4.6.14.3 Fixed in V4.6.14.3 Patch available CNA
- RBSE960 VendorNETGEAR Affected before V6.3.7.5 Fixed in V6.3.7.5 Patch available CNA
- RS700 VendorNETGEAR Affected before V1.0.7.66 Fixed in V1.0.7.66 Patch available CNA
- XR1000 VendorNETGEAR Affected before v1.0.0.68 Fixed in v1.0.0.68 Patch available CNA
CPE configurations NVD · 70
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:netgear:cbr750_firmware:*:*:*:*:*:*:*:* | before 4.6.14.4 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:cbr750:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:ex6120_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:ex6120:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:ex6130_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:ex6130:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:* | before 1.1.7.128 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:mr70_firmware:*:*:*:*:*:*:*:* | before 1.0.3.28 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:mr70:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
- cpe:2.3:o:netgear:cbr750_firmware:*:*:*:*:*:*:*:* Versions before 4.6.14.4 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:cbr750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:ex6120_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:ex6120:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:ex6130_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:ex6130:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:* Versions before 1.1.7.128 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:mr70_firmware:*:*:*:*:*:*:*:* Versions before 1.0.3.28 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:mr70:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
Show 60 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:netgear:mr80_firmware:*:*:*:*:*:*:*:* | before 1.1.7.6 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:mr80:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:* | before 1.1.7.128 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:ms70_firmware:*:*:*:*:*:*:*:* | before 1.0.3.28 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:ms70:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:ms80_firmware:*:*:*:*:*:*:*:* | before 1.1.7.6 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:ms80:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax15_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax15:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax20_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax200_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax35v2_firmware:*:*:*:*:*:*:*:* | before 1.0.11.112 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax35v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax38v2_firmware:*:*:*:*:*:*:*:* | before 1.0.11.112 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax38v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax40v2_firmware:*:*:*:*:*:*:*:* | before 1.0.11.112 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax40v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax42_firmware:*:*:*:*:*:*:*:* | before 1.0.11.112 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax42:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:* | before 1.0.11.112 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:* | before 1.0.11.112 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax48_firmware:*:*:*:*:*:*:*:* | before 1.0.11.112 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax48:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:* | before 1.0.11.112 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax50s_firmware:*:*:*:*:*:*:*:* | before 1.0.11.112 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax50s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax75_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax75:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax80_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax80:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:raxe450_firmware:*:*:*:*:*:*:*:* | before 1.0.10.86 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:raxe450:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:raxe500_firmware:*:*:*:*:*:*:*:* | before 1.0.10.86 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:raxe500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:* | before 4.6.14.3 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbr840_firmware:*:*:*:*:*:*:*:* | before 4.6.14.3 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbr840:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:* | before 4.6.14.3 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbre960_firmware:*:*:*:*:*:*:*:* | before 6.3.7.5 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbre960:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:* | before 4.6.14.3 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbs840_firmware:*:*:*:*:*:*:*:* | before 4.6.14.3 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbs840:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:* | before 4.6.14.3 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbse960_firmware:*:*:*:*:*:*:*:* | before 6.3.7.5 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbse960:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rs700_firmware:*:*:*:*:*:*:*:* | before 1.0.7.66 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rs700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:xr1000_firmware:*:*:*:*:*:*:*:* | before 1.0.0.68 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:xr1000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
- cpe:2.3:o:netgear:mr80_firmware:*:*:*:*:*:*:*:* Versions before 1.1.7.6 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:mr80:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:* Versions before 1.1.7.128 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:ms70_firmware:*:*:*:*:*:*:*:* Versions before 1.0.3.28 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:ms70:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:ms80_firmware:*:*:*:*:*:*:*:* Versions before 1.1.7.6 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:ms80:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax15_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax15:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax20_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax200_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax35v2_firmware:*:*:*:*:*:*:*:* Versions before 1.0.11.112 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax35v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax38v2_firmware:*:*:*:*:*:*:*:* Versions before 1.0.11.112 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax38v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax40v2_firmware:*:*:*:*:*:*:*:* Versions before 1.0.11.112 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax40v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax42_firmware:*:*:*:*:*:*:*:* Versions before 1.0.11.112 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax42:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:* Versions before 1.0.11.112 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:* Versions before 1.0.11.112 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax48_firmware:*:*:*:*:*:*:*:* Versions before 1.0.11.112 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax48:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:* Versions before 1.0.11.112 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax50s_firmware:*:*:*:*:*:*:*:* Versions before 1.0.11.112 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax50s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax75_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax75:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax80_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax80:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:raxe450_firmware:*:*:*:*:*:*:*:* Versions before 1.0.10.86 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:raxe450:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:raxe500_firmware:*:*:*:*:*:*:*:* Versions before 1.0.10.86 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:raxe500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:* Versions before 4.6.14.3 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbr840_firmware:*:*:*:*:*:*:*:* Versions before 4.6.14.3 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbr840:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:* Versions before 4.6.14.3 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbre960_firmware:*:*:*:*:*:*:*:* Versions before 6.3.7.5 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbre960:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:* Versions before 4.6.14.3 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbs840_firmware:*:*:*:*:*:*:*:* Versions before 4.6.14.3 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbs840:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:* Versions before 4.6.14.3 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbse960_firmware:*:*:*:*:*:*:*:* Versions before 6.3.7.5 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbse960:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rs700_firmware:*:*:*:*:*:*:*:* Versions before 1.0.7.66 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rs700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:xr1000_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0.68 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:xr1000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
Remediation
- Fix · CNA CBR750 (NETGEAR) Fixed in v4.6.14.4
- Fix · CNA MR60 (NETGEAR) Fixed in V1.1.7.128
- Fix · CNA MR70 (NETGEAR) Fixed in V1.0.3.28
- Fix · CNA MR80 (NETGEAR) Fixed in V1.1.7.6
- Fix · CNA MS60 (NETGEAR) Fixed in V1.1.7.128
- Fix · CNA MS70 (NETGEAR) Fixed in V1.0.3.28
- Fix · CNA MS80 (NETGEAR) Fixed in V1.1.7.6
- Fix · CNA RAX35v2 (NETGEAR) Fixed in V1.0.11.112
- Fix · CNA RAX38v2 (NETGEAR) Fixed in V1.0.11.112
- Fix · CNA RAX40v2 (NETGEAR) Fixed in V1.0.11.112
- Fix · CNA RAX42 (NETGEAR) Fixed in V1.0.11.112
- Fix · CNA RAX43 (NETGEAR) Fixed in V1.0.11.112
- Fix · CNA RAX45 (NETGEAR) Fixed in V1.0.11.112
- Fix · CNA RAX48 (NETGEAR) Fixed in V1.0.11.112
- Fix · CNA RAX50 (NETGEAR) Fixed in V1.0.11.112
- Fix · CNA RAX50S (NETGEAR) Fixed in V1.0.11.112
- Fix · CNA RAXE450 (NETGEAR) Fixed in V1.0.10.86
- Fix · CNA RAXE500 (NETGEAR) Fixed in V1.0.10.86
- Fix · CNA RBR750 (NETGEAR) Fixed in V4.6.14.3
- Fix · CNA RBR840 (NETGEAR) Fixed in V4.6.14.3
- Fix · CNA RBR850 (NETGEAR) Fixed in V4.6.14.3
- Fix · CNA RBRE960 (NETGEAR) Fixed in V6.3.7.5
- Fix · CNA RBS750 (NETGEAR) Fixed in V4.6.14.3
- Fix · CNA RBS840 (NETGEAR) Fixed in V4.6.14.3
- Fix · CNA RBS850 (NETGEAR) Fixed in V4.6.14.3
- Fix · CNA RBSE960 (NETGEAR) Fixed in V6.3.7.5
- Fix · CNA RS700 (NETGEAR) Fixed in V1.0.7.66
- Fix · CNA XR1000 (NETGEAR) Fixed in v1.0.0.68
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
NETGEAR EX6120, EX6130 and 26 more products — kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory
9 records Highest priority Priority LOW 9 LOW
Other records, highest priority first
- TI-2026-08098 Insufficient input validation in certain NETGEAR routersPriority LOW 33
- TI-2026-08095 Certain NETGEAR routers allow authenticated administrators to gain unintended control of the routerPriority LOW 22
- TI-2026-02668 Unauthenticated users can disrupt router operationPriority LOW 22
Timeline
- 2026-10-02 Threatist record created from CVE-2026-0418
- 2026-10-03 Alias added: GHSA-5gqq-ch9p-4h64
References
Patch 35
- https://www.netgear.com/support/product/cbr750/
- https://www.netgear.com/support/product/rax15/
- https://www.netgear.com/support/product/ex6120/
- https://www.netgear.com/support/product/rax200/
- https://www.netgear.com/support/product/rax38v2/
- https://www.netgear.com/support/product/rax75/
- https://www.netgear.com/support/product/mr60/
- https://www.netgear.com/support/product/rax80/
- https://www.netgear.com/support/product/rbr840/
- https://www.netgear.com/support/product/rbr750/
- https://www.netgear.com/support/product/rbs750/
- https://www.netgear.com/support/product/ex6130/
- https://www.netgear.com/support/product/rbr850/
- https://www.netgear.com/support/product/rbs840/
- https://www.netgear.com/support/product/rbs850/
- https://www.netgear.com/support/product/ms60/
- https://www.netgear.com/support/product/rs700/
- https://www.netgear.com/support/product/mr70/
- https://www.netgear.com/support/product/mr80/
- https://www.netgear.com/support/product/ms70/
- https://www.netgear.com/support/product/rax35v2/
- https://www.netgear.com/support/product/rax20/
- https://www.netgear.com/support/product/ms80/
- https://www.netgear.com/support/product/rax40v2/
- https://www.netgear.com/support/product/rax42/
- https://www.netgear.com/support/product/rax43/
- https://www.netgear.com/support/product/rax50/
- https://www.netgear.com/support/product/raxe500/
- https://www.netgear.com/support/product/rax48/
- https://www.netgear.com/support/product/rax50s/
- https://www.netgear.com/support/product/rbse960/
- https://www.netgear.com/support/product/raxe450/
- https://www.netgear.com/support/product/rax45/
- https://www.netgear.com/support/product/rbre960/
- https://www.netgear.com/support/product/xr1000/
More NETGEAR Cbr750 Firmware vulnerabilities
- TI-2021-20709 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1CRITICAL 9.8
- TI-2021-20699 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1CRITICAL 9.8
- TI-2021-20717 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1CRITICAL 10.0
- TI-2021-20708 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1CRITICAL 9.8
- TI-2021-20707 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1CRITICAL 9.8
- TI-2021-20703 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1CRITICAL 9.8
Sources
- CVE-2026-0418 · CVE Program
- CVE-2026-0418 · NVD
- FIRST EPSS
- GHSA-5gqq-ch9p-4h64 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences