CVE-2026-0418
Published Jun 9, 2026Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.
- evidence mentions
- 36
- Buzz score
- 36.5
Vendor/product archive
6 CVEs tagged to netgear / rax35v2_firmware — 3 Critical, 0 High, 2 Medium, 1 Low, 0 Unrated.
Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.
Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.
A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-i…
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 3.2.18.2, EAX20 before 1.0.0.58, EAX80…
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7000v2 before 1.0.0.74, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60…
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, D7000v2 before 1.0.0.74, LAX20…