← Vulnerability feed

Vulnerability record · CVE-2026-0416 · published 9 June 2026

CVE-2026-0416: Netgear raxe450 firmware improper input validation vulnerability

Netgear · Raxe450 Firmware

An insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated administrator with local network access to submit crafted input that bypasses intended management interface restrictions, resulting in unauthorized modification of protected router software or functionality.

4.3 CVSS 4.0 Medium EPSS 0.18% · top 93.1% CWE-20 · Improper input validation
4.3CVSS 4.0 base score
0.18%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
3References
23 Jul 2026Last modified by NVD

Description

An insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated administrator with local network access to submit crafted input that bypasses intended management interface restrictions, resulting in unauthorized modification of protected router software or functionality.

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory Vendor Advisory
https://www.netgear.com/support/product/raxe450/ Product
https://www.netgear.com/support/product/raxe500/ Product

Track CVE-2026-0416 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2021-34982Netgear dc112a firmware stack-based buffer overflow vulnerabilityNETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers …EPSS 0.58%8.8CVE-2021-34991Netgear ex3700 firmware stack-based buffer overflow vulnerabilityThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers…EPSS 5.7%6.9CVE-2026-9213Netgear mr70 firmware improper input validation vulnerabilityA vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamper with traffic between the router and …EPSS 0.68%6.5CVE-2021-34983Netgear xr1000 firmware missing authentication for critical function vulnerabilityNETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability. This vulnerability allows network-a…EPSS 0.33%4.9CVE-2026-11739Netgear ms90 firmware os command injection vulnerabilityA command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and …EPSS 1.1%4.9CVE-2026-9210Netgear ex3700 firmware improper input validation vulnerabilityInsufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make u…EPSS 0.35%4.4CVE-2025-12946Netgear rs700 firmware improper input validation vulnerabilityA vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the route…EPSS 0.29%4.3CVE-2026-0418Netgear cbr750 firmware vulnerabilityInsufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the sys…EPSS 0.25%

Source: NIST National Vulnerability Database (record CVE-2026-0416), CISA KEV, FIRST EPSS (scores of 2026-10-10). This page is refreshed as NVD updates the record.