CVE-2026-0415 | BDVDB-2026-338708 Detail
NETGEARRBE970
Description#
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
Impact#
CAPEC-248 Command Injection
Weaknesses#
- CWE-20 Improper Input Validation
References#
- https://www.netgear.com/support/product/rbe970/
- https://www.netgear.com/support/product/rbre950/
- https://www.netgear.com/support/product/rbr850/
- https://www.netgear.com/support/product/rbs840/
- https://www.netgear.com/support/product/rbr750/
- https://www.netgear.com/support/product/rbs750/
- https://www.netgear.com/support/product/rbr840/
- https://www.netgear.com/support/product/rbr860/
- https://www.netgear.com/support/product/rbre960/
- https://www.netgear.com/support/product/rbs850/
- https://www.netgear.com/support/product/rbs860/
- https://www.netgear.com/support/product/rbse950/
- https://www.netgear.com/support/product/rbse960/
- https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.