← Vulnerability feed

Vulnerability record · CVE-2026-0406 · published 13 January 2026

CVE-2026-0406: Netgear xr1000v2 firmware improper input validation vulnerability

Netgear · Xr1000v2 Firmware

An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injections.

6.1 CVSS 4.0 Medium EPSS 0.25% · top 84.9% CWE-20 · Improper input validation
6.1CVSS 4.0 base score
0.25%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injections.

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory PatchVendor Advisory
https://www.netgear.com/support/product/xr1000v2 PatchProduct

Track CVE-2026-0406 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

4.9CVE-2026-11739Netgear ms90 firmware os command injection vulnerabilityA command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and …EPSS 1.1%1.9CVE-2026-11735Netgear r7000 firmware stack-based buffer overflow vulnerabilityA stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification …EPSS 0.51%1.9CVE-2026-11736Netgear rax20 firmware improper input validation vulnerabilityA stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to …EPSS 0.51%1.9CVE-2026-0410Netgear r7000 firmware improper input validation vulnerabilityAuthenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software a…EPSS 0.22%1.8CVE-2026-9215Netgear xr1000 firmware cross-site request forgery vulnerabilityA cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a…EPSS 0.19%9.5CVE-2026-88771Citrix netscaler application delivery controller improper input validation vulnerabilityImproper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-…KEVEPSS 1.1%9.5CVE-2026-93952Arista velocloud orchestrator improper input validation vulnerabilityVeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality an…KEVEPSS 1.1%8.8CVE-2019-1068Microsoft SQL Server improper input validation remote code executionMicrosoft SQL Server mishandles processing of internal functions, allowing an authenticated remote attacker to execute code on the database server. T…KEVEPSS 57%analysed

Source: NIST National Vulnerability Database (record CVE-2026-0406), CISA KEV, FIRST EPSS (scores of 2026-10-10). This page is refreshed as NVD updates the record.