CVE-2026-0417
MediumCVSS 4.5Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
In certain NETGEAR devices, insufficient input validation allows authenticated administrators on the local network to tamper with the router's integrity.
Risk Assessment
An authenticated attacker on the local network can modify router configuration, potentially leading to device takeover and network security compromise.
Recommendation
Update the NETGEAR device firmware to the latest available version that includes a fix for this issue.
Other vulnerabilities in NETGEAR
See all- CVE-2026-11814Medium
A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.
- CVE-2026-11738Medium
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
- CVE-2026-11737Medium
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality.
- CVE-2026-11736Low
A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality.
- CVE-2026-11735Low
A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.
- CVE-2026-11734Low
A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.
- CVE-2026-11733Low
A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.
- CVE-2026-9210Medium
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
- CVE-2026-0416Medium
Certain NETGEAR router models contain an insufficient input validation vulnerability that allows an authenticated administrator with local network access to submit crafted input that bypasses intended management interface restrictions, resulting in unauthorized modification of protected router software or functionality.
- CVE-2026-0415Medium
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
Original NVD description (English source)
Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity.