Netgear Router Functionality Modification via Admin Interface (CVE-2026-0416)
CVE-2026-0416 Published on June 9, 2026
Improper input validation in certain NETGEAR routers allows unauthorized modification of protected router functionality
An insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated administrator with local network access to submit crafted input that bypasses intended management interface restrictions, resulting in unauthorized modification of protected router software or functionality.
Weakness Type
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Products Associated with CVE-2026-0416
stack.watch emails you whenever new vulnerabilities are published in Netgear Raxe450 or Netgear Raxe500. Just hit a watch button to start following.
Affected Versions
NETGEAR RAXE450:- Version V1.0.12.96 and below V1.2.14.114 is affected.
- Version V1.0.12.96 and below V1.2.14.114 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.