Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2026-0418


Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.


Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 4.5, indicating it requires adjacent network access with relatively low complexity without requiring user interaction . The vulnerability impacts integrity (unauthorized modifications), for affected systems. Impacting 70 products from netgear, from netgear, from netgear and 67 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2026, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.


Published

2026-06-09T17:16:59.687

Last Modified

2026-07-23T08:10:00.137

Status

Analyzed

Source

a2826606-91e7-4eb6-899e-8484bd4575d5

Severity

CVSSv3.1: 4.5 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-15
  • Type: Primary
    CWE-610

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System netgear cbr750_firmware < 4.6.14.4 Yes
Hardware netgear cbr750 - No
Operating System netgear ex6120_firmware - Yes
Hardware netgear ex6120 - No
Operating System netgear ex6130_firmware - Yes
Hardware netgear ex6130 - No
Operating System netgear mr60_firmware < 1.1.7.128 Yes
Hardware netgear mr60 - No
Operating System netgear mr70_firmware < 1.0.3.28 Yes
Hardware netgear mr70 - No
Operating System netgear mr80_firmware < 1.1.7.6 Yes
Hardware netgear mr80 - No
Operating System netgear ms60_firmware < 1.1.7.128 Yes
Hardware netgear ms60 - No
Operating System netgear ms70_firmware < 1.0.3.28 Yes
Hardware netgear ms70 - No
Operating System netgear ms80_firmware < 1.1.7.6 Yes
Hardware netgear ms80 - No
Operating System netgear rax15_firmware - Yes
Hardware netgear rax15 - No
Operating System netgear rax20_firmware - Yes
Hardware netgear rax20 - No
Operating System netgear rax200_firmware - Yes
Hardware netgear rax200 - No
Operating System netgear rax35v2_firmware < 1.0.11.112 Yes
Hardware netgear rax35v2 - No
Operating System netgear rax38v2_firmware < 1.0.11.112 Yes
Hardware netgear rax38v2 - No
Operating System netgear rax40v2_firmware < 1.0.11.112 Yes
Hardware netgear rax40v2 - No
Operating System netgear rax42_firmware < 1.0.11.112 Yes
Hardware netgear rax42 - No
Operating System netgear rax43_firmware < 1.0.11.112 Yes
Hardware netgear rax43 - No
Operating System netgear rax45_firmware < 1.0.11.112 Yes
Hardware netgear rax45 - No
Operating System netgear rax48_firmware < 1.0.11.112 Yes
Hardware netgear rax48 - No
Operating System netgear rax50_firmware < 1.0.11.112 Yes
Hardware netgear rax50 - No
Operating System netgear rax50s_firmware < 1.0.11.112 Yes
Hardware netgear rax50s - No
Operating System netgear rax75_firmware - Yes
Hardware netgear rax75 - No
Operating System netgear rax80_firmware - Yes
Hardware netgear rax80 - No
Operating System netgear raxe450_firmware < 1.0.10.86 Yes
Hardware netgear raxe450 - No
Operating System netgear raxe500_firmware < 1.0.10.86 Yes
Hardware netgear raxe500 - No
Operating System netgear rbr750_firmware < 4.6.14.3 Yes
Hardware netgear rbr750 - No
Operating System netgear rbr840_firmware < 4.6.14.3 Yes
Hardware netgear rbr840 - No
Operating System netgear rbr850_firmware < 4.6.14.3 Yes
Hardware netgear rbr850 - No
Operating System netgear rbre960_firmware < 6.3.7.5 Yes
Hardware netgear rbre960 - No
Operating System netgear rbs750_firmware < 4.6.14.3 Yes
Hardware netgear rbs750 - No
Operating System netgear rbs840_firmware < 4.6.14.3 Yes
Hardware netgear rbs840 - No
Operating System netgear rbs850_firmware < 4.6.14.3 Yes
Hardware netgear rbs850 - No
Operating System netgear rbse960_firmware < 6.3.7.5 Yes
Hardware netgear rbse960 - No
Operating System netgear rs700_firmware < 1.0.7.66 Yes
Hardware netgear rs700 - No
Operating System netgear xr1000_firmware < 1.0.0.68 Yes
Hardware netgear xr1000 - No

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For netgear's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.