Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2026-0418 Details
Description
Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.
A vulnerability exists in various Netgear devices due to inadequate configuration management. This issue enables authenticated administrators connected to the local network to manipulate the system. Affected products include the Orbi WiFi 6 Router AX4200 (CBR750), Orbi WiFi 6 Add-on Satellite (MS60), Nighthawk Mesh WiFi 6 Router (MR70), Nighthawk Tri-band Mesh WiFi 6 Router (MR80), Nighthawk AX4 4-Stream AX3000 WiFi 6 Router (RAX35v2), Nighthawk AX5 5-Stream AX4200 WiFi Router (RAX40v2), Nighthawk AX6 6-Stream AX4300 WiFi Router (RAX45), Nighthawk AX6 6-Stream AX5400 WiFi 6 Router (RAX50), Nighthawk AX6 6-Stream AX5400 WiFi 6 Router (RAX50S), Nighthawk AX8 8-Stream AX5700 WiFi 6 Router (RAX75), Nighthawk AX8 8-Stream AX6000 WiFi 6 Router (RAX80), Nighthawk AXE10000 Tri-Band WiFi 6E Router (RAXE450), Nighthawk AXE10000 Tri-Band WiFi 6E Router (RAXE500), Orbi Quad-band Mesh WiFi 6E Router (RBRE960), Orbi WiFi 6 Router AX6000 (RBR850), Orbi WiFi 6 System AX5700 (RBR840), Orbi WiFi 6 Add-on Satellite AX5700 (RBS840) and Orbi WiFi 6 Add-on Satellite AX4200 (RBS750).
Users can update to the latest firmware version available for their specific Netgear device. Instructions for downloading the firmware can be found on the Netgear Download Center.
Metrics
CVSS 4.0 Severity and Vector Strings:
CNA: Netgear, Inc.CVSS-B:6.8 MEDIUMVector:CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 9, 2026Exploitation: NoneAutomatable: NoTechnical Impact: Partial
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-610 | Externally Controlled Reference to a Resource in Another Sphere | [email protected] |
| CWE-15 | External Control of System or Configuration Setting | Netgear, Inc. |
Affected Products
| Product | Versions |
|---|---|
| netgear cbr750 firmware | < 4.6.14.4 |
CPE
Remediation
| |
| netgear cbr750 | All versions |
CPE
Remediation
| |
| netgear ex6120 firmware | All versions |
CPE
Remediation
| |
| netgear ex6120 | All versions |
CPE
Remediation
| |
| netgear ex6130 firmware | All versions |
CPE
Remediation
| |
| netgear ex6130 | All versions |
CPE
Remediation
| |
| netgear mr60 firmware | < 1.1.7.128 |
CPE
Remediation
| |
| netgear mr60 | All versions |
CPE
Remediation
| |
| netgear mr70 firmware | < 1.0.3.28 |
CPE
Remediation
| |
| netgear mr70 | All versions |
CPE
Remediation
| |
| netgear mr80 firmware | < 1.1.7.6 |
CPE
Remediation
| |
| netgear mr80 | All versions |
CPE
Remediation
| |
| netgear ms60 firmware | < 1.1.7.128 |
CPE
Remediation
| |
| netgear ms60 | All versions |
CPE
Remediation
| |
| netgear ms70 firmware | < 1.0.3.28 |
CPE
Remediation
| |
| netgear ms70 | All versions |
CPE
Remediation
| |
| netgear ms80 firmware | < 1.1.7.6 |
CPE
Remediation
| |
| netgear ms80 | All versions |
CPE
Remediation
| |
| netgear rax15 firmware | All versions |
CPE
Remediation
| |
| netgear rax15 | All versions |
CPE
Remediation
| |
| netgear rax20 firmware | All versions |
CPE
Remediation
| |
| netgear rax20 | All versions |
CPE
Remediation
| |
| netgear rax200 firmware | All versions |
CPE
Remediation
| |
| netgear rax200 | All versions |
CPE
Remediation
| |
| netgear rax35v2 firmware | < 1.0.11.112 |
CPE
Remediation
| |
| netgear rax35v2 | All versions |
CPE
Remediation
| |
| netgear rax38v2 firmware | < 1.0.11.112 |
CPE
Remediation
| |
| netgear rax38v2 | All versions |
CPE
Remediation
| |
| netgear rax40v2 firmware | < 1.0.11.112 |
CPE
Remediation
| |
| netgear rax40v2 | All versions |
CPE
Remediation
| |
| netgear rax42 firmware | < 1.0.11.112 |
CPE
Remediation
| |
| netgear rax42 | All versions |
CPE
Remediation
| |
| netgear rax43 firmware | < 1.0.11.112 |
CPE
Remediation
| |
| netgear rax43 | All versions |
CPE
Remediation
| |
| netgear rax45 firmware | < 1.0.11.112 |
CPE
Remediation
| |
| netgear rax45 | All versions |
CPE
Remediation
| |
| netgear rax48 firmware | < 1.0.11.112 |
CPE
Remediation
| |
| netgear rax48 | All versions |
CPE
Remediation
| |
| netgear rax50 firmware | < 1.0.11.112 |
CPE
Remediation
| |
| netgear rax50 | All versions |
CPE
Remediation
| |
| netgear rax50s firmware | < 1.0.11.112 |
CPE
Remediation
| |
| netgear rax50s | All versions |
CPE
Remediation
| |
| netgear rax75 firmware | All versions |
CPE
Remediation
| |
| netgear rax75 | All versions |
CPE
Remediation
| |
| netgear rax80 firmware | All versions |
CPE
Remediation
| |
| netgear rax80 | All versions |
CPE
Remediation
| |
| netgear raxe450 firmware | < 1.0.10.86 |
CPE
Remediation
| |
| netgear raxe450 | All versions |
CPE
Remediation
| |
| netgear raxe500 firmware | < 1.0.10.86 |
CPE
Remediation
| |
| netgear raxe500 | All versions |
CPE
Remediation
| |
| netgear rbr750 firmware | < 4.6.14.3 |
CPE
Remediation
| |
| netgear rbr750 | All versions |
CPE
Remediation
| |
| netgear rbr840 firmware | < 4.6.14.3 |
CPE
Remediation
| |
| netgear rbr840 | All versions |
CPE
Remediation
| |
| netgear rbr850 firmware | < 4.6.14.3 |
CPE
Remediation
| |
| netgear rbr850 | All versions |
CPE
Remediation
| |
| netgear rbre960 firmware | < 6.3.7.5 |
CPE
Remediation
| |
| netgear rbre960 | All versions |
CPE
Remediation
| |
| netgear rbs750 firmware | < 4.6.14.3 |
CPE
Remediation
| |
| netgear rbs750 | All versions |
CPE
Remediation
| |
| netgear rbs840 firmware | < 4.6.14.3 |
CPE
Remediation
| |
| netgear rbs840 | All versions |
CPE
Remediation
| |
| netgear rbs850 firmware | < 4.6.14.3 |
CPE
Remediation
| |
| netgear rbs850 | All versions |
CPE
Remediation
| |
| netgear rbse960 firmware | < 6.3.7.5 |
CPE
Remediation
| |
| netgear rbse960 | All versions |
CPE
Remediation
| |
| netgear rs700 firmware | < 1.0.7.66 |
CPE
Remediation
| |
| netgear rs700 | All versions |
CPE
Remediation
| |
| netgear xr1000 firmware | < 1.0.0.68 |
CPE
Remediation
| |
| netgear xr1000 | All versions |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 23, 2026 | CVE Translated | [email protected] |
| Jun 18, 2026 | Initial Analysis | [email protected] |
| Jun 17, 2026 | CVE Modified | Netgear, Inc. |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 10, 2026 | CVE Modified | Netgear, Inc. |
| Jun 9, 2026 | New CVE Received | Netgear, Inc. |