CVE-2026-107918

MediumCVSS 4.5

Published: 13/10/2026(UTC)Updated: 16/10/2026(UTC)Translated: 13/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

NETGEAR R7300 router has insufficient input validation in the LAN Setup feature. An authenticated administrator connected to the local network can perform unauthorized actions on the router. This was identified in a controlled research environment using a simulated version of the router software and has not been confirmed on physical production devices.

Risk Assessment

An administrator with local network access can perform unauthorized actions, affecting router integrity. Impact may be limited as it is unconfirmed on production devices.

Recommendation

Update NETGEAR R7300 router firmware to the latest version. Restrict administrative access to trusted networks.

Other vulnerabilities in NETGEAR R7300

CVE-2026-107917Medium
An insufficient input validation vulnerability exists in the PPPoE Setup feature of the NETGEAR R7300 router, allowing authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.

Original NVD description (English source)

Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS