Login Request a demo
Medium severity · published Jun 9, 2026
CVE-2026-0417
Insufficient input validation in certain NETGEAR routers
4.5
CVSS
0.2%
EPSS
No
On KEV
Description
Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Attack vector
Adjacent
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MR
MR60 · NETGEAR
before V1.1.7.132 · source: vendor
MR
MR70 · NETGEAR
before V1.0.3.28 · source: vendor
MR
MR80 · NETGEAR
before V1.1.7.14 · source: vendor
MS
MS60 · NETGEAR
before V1.1.7.132 · source: vendor
MS
MS70 · NETGEAR
before V1.0.3.28 · source: vendor
MS
MS80 · NETGEAR
before V1.1.7.14 · source: vendor
R6
R6400v2 · NETGEAR
before V1.0.4.128 · source: vendor
R6
R6700v3 · NETGEAR
before V1.0.4.128 · source: vendor
R6
R6900P · NETGEAR
before V1.3.3.152 · source: vendor
R7
R7000 · NETGEAR
before V1.0.11.216 · source: vendor
R7
R7000P · NETGEAR
before V1.3.3.152 · source: vendor
R7
R7960P · NETGEAR
before V1.4.4.92 · source: vendor
Affected product
MR
MR60
NETGEAR
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-0417
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-0417
Vendor Advisory
https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory
Product
https://www.netgear.com/support/product/mr60/
Product
https://www.netgear.com/support/product/mr70/
Product
https://www.netgear.com/support/product/mr80/
Product
https://www.netgear.com/support/product/ms60/
Product
https://www.netgear.com/support/product/ms70/
More from MR60
6.8
CVE-2026-11814
Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers
6.4
CVE-2026-11739
Command injection vulnerability in some NETGEAR Nighthawk devices
4.5
CVE-2026-0418
Certain NETGEAR devices allow administrators to tamper with system
4.5
CVE-2026-9210
Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router