CVE-2026-0418

Description

Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.

CVSS breakdown

CVSS 4.0

Attack Vector

Adjacent

Attack Complexity

Low

Attack Requirements

None

Privileges Required

High

User Interaction

None

Confidentiality (Vulnerable System)

None

Integrity (Vulnerable System)

High

Availability (Vulnerable System)

None

Confidentiality (Subsequent System)

None

Integrity (Subsequent System)

None

Availability (Subsequent System)

None

E

Unchanged

R

Unchanged

V

D

RE

Low

U

Amber

Affected products

NETGEAR / CBR7500 – v4.6.14.4
NETGEAR / EX61200 – 1.0.0.72
NETGEAR / EX61300 – 1.0.0.54
NETGEAR / MR600 – V1.1.7.128
NETGEAR / MR700 – V1.0.3.28
NETGEAR / MR800 – V1.1.7.6
NETGEAR / MS600 – V1.1.7.128
NETGEAR / MS700 – V1.0.3.28
NETGEAR / MS800 – V1.1.7.6
NETGEAR / RAX150 – 1.0.18.144
NETGEAR / RAX200 – 1.0.18.144
NETGEAR / RAX2000 – 1.0.11.148
NETGEAR / RAX35v20 – V1.0.11.112
NETGEAR / RAX38v20 – V1.0.11.112
NETGEAR / RAX40v20 – V1.0.11.112
NETGEAR / RAX420 – V1.0.11.112
NETGEAR / RAX430 – V1.0.11.112
NETGEAR / RAX450 – V1.0.11.112
NETGEAR / RAX480 – V1.0.11.112
NETGEAR / RAX500 – V1.0.11.112
NETGEAR / RAX50S0 – V1.0.11.112
NETGEAR / RAX750 – 1.0.11.148
NETGEAR / RAX800 – 1.0.11.148
NETGEAR / RAXE4500 – V1.0.10.86
NETGEAR / RAXE5000 – V1.0.10.86
NETGEAR / RBR7500 – V4.6.14.3
NETGEAR / RBR8400 – V4.6.14.3
NETGEAR / RBR8500 – V4.6.14.3
NETGEAR / RBRE9600 – V6.3.7.5
NETGEAR / RBS7500 – V4.6.14.3
NETGEAR / RBS8400 – V4.6.14.3
NETGEAR / RBS8500 – V4.6.14.3
NETGEAR / RBSE9600 – V6.3.7.5
NETGEAR / RS7000 – V1.0.7.66
NETGEAR / XR10000 – v1.0.0.68

Description

CVSS breakdown

Affected products

References