CVE-2026-0419

HighCVSS 8.0

Published: 09/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

Summary

Insufficient input validation vulnerability in NETGEAR JR6150 router allows users connected to local WiFi to execute operating system commands. The router reached end-of-support in 2018 with no further security updates planned.

Risk Assessment

An attacker on the local network could take control of the router and potentially the entire network.

Recommendation

Immediately replace the NETGEAR JR6150 router with a newer supported model.

Other vulnerabilities in NETGEAR JR6150

CVE-2026-0412Medium
The NETGEAR JR6150 (AC750) router contains an insufficient input validation vulnerability that allows administrators connected to the local network to make unauthorized modification of router software and functionality. The device reached End-of-Support in 2018 and no longer receives security updates. NETGEAR recommends replacing it with newer models.

Original NVD description (English source)

Insufficient input validation in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows users connected to the local WiFi Networks to execute operating system commands. NETGEAR JR6150 has reached End-of-Support phase as of 2018 , and no further security updates are planned. NETGEAR strongly recommends replacing these devices with newer NETGEAR models to ensure continued security support and updates. This vulnerability has been identified through firmware emulation in a controlled research environment and has not been verified on production hardware.