CVE-2026-107917
MediumCVSS 4.5Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
An insufficient input validation vulnerability exists in the PPPoE Setup feature of the NETGEAR R7300 router, allowing authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.
Risk Assessment
An administrator with local network access could exploit the flaw to perform unauthorized operations on the router, potentially altering configuration or gaining control of the network edge device.
Recommendation
Restrict administrative access to the router to trusted networks and accounts only, monitor PPPoE configuration changes, and track vendor firmware updates.
Other vulnerabilities in NETGEAR R7300
Original NVD description (English source)
Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS