Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

CVE-2026-0418— Certain NETGEAR devices allow administrators to tamper with system

Quick assessment

Affected

NETGEAR CBR750

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

NETGEAR Rax35等都是美国网件（NETGEAR）公司的一款无线路由器。 NETGEAR多款产品存在安全漏洞，该漏洞源于配置管理不足，可能导致连接到本地网络的经过身份验证的管理员篡改系统。以下产品受到影响：cbr750、ex6120、ex6130、mr60、mr70、mr80、ms60、ms70、ms80、rax15、rax20、rax200、rax35v2、rax38v2、rax40v2、rax42、rax43、rax45、rax48、rax50、rax50s、rax75、rax80、raxe4

AI Predicted 5.3 Difficulty: Easy EPSS 0.24% · P16 Updated Jun 13, 2026

Possible ATT&CK Techniques 1 AI

T1136 · Create Account

Affected Version Matrix 35

Vendor	Product	Version Range	Status
NETGEAR	CBR750	`< v4.6.14.4`	affected
NETGEAR	EX6120	`≤ 1.0.0.72`	affected
NETGEAR	EX6130	`≤ 1.0.0.54`	affected
NETGEAR	MR60	`< V1.1.7.128`	affected
NETGEAR	MR70	`< V1.0.3.28`	affected
NETGEAR	MR80	`< V1.1.7.6`	affected
NETGEAR	MS60	`< V1.1.7.128`	affected
NETGEAR	MS70	`< V1.0.3.28`	affected
NETGEAR	MS80	`< V1.1.7.6`	affected
NETGEAR	RAX15	`≤ 1.0.18.144`	affected
NETGEAR	RAX20	`≤ 1.0.18.144`	affected
NETGEAR	RAX200	`≤ 1.0.11.148`	affected
NETGEAR	RAX35v2	`< V1.0.11.112`	affected
NETGEAR	RAX38v2	`< V1.0.11.112`	affected
NETGEAR	RAX40v2	`< V1.0.11.112`	affected
NETGEAR	RAX42	`< V1.0.11.112`	affected
NETGEAR	RAX43	`< V1.0.11.112`	affected
NETGEAR	RAX45	`< V1.0.11.112`	affected
NETGEAR	RAX48	`< V1.0.11.112`	affected
NETGEAR	RAX50	`< V1.0.11.112`	affected
NETGEAR	RAX50S	`< V1.0.11.112`	affected
NETGEAR	RAX75	`≤ 1.0.11.148`	affected
NETGEAR	RAX80	`≤ 1.0.11.148`	affected
NETGEAR	RAXE450	`< V1.0.10.86`	affected
NETGEAR	RAXE500	`< V1.0.10.86`	affected
NETGEAR	RBR750	`< V4.6.14.3`	affected
NETGEAR	RBR840	`< V4.6.14.3`	affected
NETGEAR	RBR850	`< V4.6.14.3`	affected
NETGEAR	RBRE960	`< V6.3.7.5`	affected
NETGEAR	RBS750	`< V4.6.14.3`	affected
NETGEAR	RBS840	`< V4.6.14.3`	affected
NETGEAR	RBS850	`< V4.6.14.3`	affected
NETGEAR	RBSE960	`< V6.3.7.5`	affected
NETGEAR	RS700	`< V1.0.7.66`	affected
NETGEAR	XR1000	`< v1.0.0.68`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-0418

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Certain NETGEAR devices allow administrators to tamper with system

Source: CVE Program / CVE List V5

Vulnerability Description

Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/R:U/V:D/RE:L/U:Amber

Source: CVE Program / CVE List V5

Vulnerability Type

系统设置或配置在外部可控制

Source: CVE Program / CVE List V5

Vulnerability Title

NETGEAR多款产品安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE
NETGEAR	CBR750	0 ~ v4.6.14.4	-
NETGEAR	EX6120	0 ~ 1.0.0.72	-
NETGEAR	EX6130	0 ~ 1.0.0.54	-
NETGEAR	MR60	0 ~ V1.1.7.128	-
NETGEAR	MR70	0 ~ V1.0.3.28	-
NETGEAR	MR80	0 ~ V1.1.7.6	-
NETGEAR	MS60	0 ~ V1.1.7.128	-
NETGEAR	MS70	0 ~ V1.0.3.28	-
NETGEAR	MS80	0 ~ V1.1.7.6	-
NETGEAR	RAX15	0 ~ 1.0.18.144	-
NETGEAR	RAX20	0 ~ 1.0.18.144	-
NETGEAR	RAX200	0 ~ 1.0.11.148	-
NETGEAR	RAX35v2	0 ~ V1.0.11.112	-
NETGEAR	RAX38v2	0 ~ V1.0.11.112	-
NETGEAR	RAX40v2	0 ~ V1.0.11.112	-
NETGEAR	RAX42	0 ~ V1.0.11.112	-
NETGEAR	RAX43	0 ~ V1.0.11.112	-
NETGEAR	RAX45	0 ~ V1.0.11.112	-
NETGEAR	RAX48	0 ~ V1.0.11.112	-
NETGEAR	RAX50	0 ~ V1.0.11.112	-
NETGEAR	RAX50S	0 ~ V1.0.11.112	-
NETGEAR	RAX75	0 ~ 1.0.11.148	-
NETGEAR	RAX80	0 ~ 1.0.11.148	-
NETGEAR	RAXE450	0 ~ V1.0.10.86	-
NETGEAR	RAXE500	0 ~ V1.0.10.86	-
NETGEAR	RBR750	0 ~ V4.6.14.3	-
NETGEAR	RBR840	0 ~ V4.6.14.3	-
NETGEAR	RBR850	0 ~ V4.6.14.3	-
NETGEAR	RBRE960	0 ~ V6.3.7.5	-
NETGEAR	RBS750	0 ~ V4.6.14.3	-

II. Public POCs for CVE-2026-0418

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-0418

请登录查看更多情报信息。

Vendor Pages for CVE-2026-0418 (35)

🔗 RBSE960 | Orbi Quad-band Mesh WiFi 6E Add-on Satellite product patch
🔗 RAX80 | Nighthawk AX8 8-Stream WiFi Router product patch
🔗 MR70 | Nighthawk Mesh WiFi 6 Router product patch
🔗 MS60 | Nighthawk Mesh WiFi 6 Add-on Satellite product patch
🔗 RAX43 | Nighthawk AX5 5-Stream AX4200 WiFi Router product patch
🔗 https://www.netgear.com/support/product/rax50s/ product patch
🔗 RAX40v2 | Nighthawk AX4 4-Stream WiFi Router product patch
🔗 RAX75 | Nighthawk AX8 8-Stream AX5700 WiFi 6 Router product patch
🔗 RAX38v2 | Nighthawk AX4 4-Stream AX3000 WiFi Router product patch
🔗 RAXE500 | Nighthawk AX12 12-Stream AXE11000 Tri-Band WiFi 6E Router product patch
🔗 RAX35v2 | Nighthawk AX4 4-Stream AX3000 WiFi 6 Router product patch
🔗 RBRE960 | Orbi Quad-band Mesh WiFi 6E Router product patch
🔗 RAX42 | Nighthawk AX5 5-Stream AX4200 WiFi Router product patch
🔗 RAXE450 | Nighthawk AXE10000 Tri-Band WiFi 6E Router product patch
🔗 RAX48 | Nighthawk AX6 6-Stream AX5200 WiFi 6 Router product patch
🔗 MS80 | Nighthawk Tri-band Mesh WiFi 6 Add-on Satellite product patch
🔗 RAX50 | Nighthawk AX6 6-Stream AX5400 WiFi 6 Router product patch
🔗 RBS840 | Orbi WiFi 6 Add-on Satellite AX5700 product patch
🔗 MR60 | Nighthawk Mesh WiFi 6 Router product patch
🔗 XR1000 | Nighthawk WiFi 6 Pro Gaming Router product patch
🔗 RAX15 | 4-Stream AX1800 WiFi 6 Router product patch
🔗 RAX20 | 4-Stream AX1800 WiFi 6 Router product patch
🔗 RAX45 | Nighthawk AX6 6-Stream AX4300 WiFi Router product patch
🔗 EX6120 | AC1200 Dual Band WiFi Range Extender product patch
🔗 RBR750 | Orbi WiFi 6 Router AX4200 product patch
🔗 RS700 | Nighthawk BE19000 WiFi 7 Tri-Band Router product patch
🔗 RBS750 | Orbi WiFi 6 Add-on Satellite AX4200 product patch
🔗 MS70 | Nighthawk Mesh WiFi 6 Add-on Satellite product patch
🔗 RAX200 | Nighthawk Tri-Band AX12 12-Stream WiFi Router product patch
🔗 RBS850 | Orbi WiFi 6 Satellite AX6000 product patch
🔗 EX6130 | AC1200 WiFi Range Extender product patch
🔗 RBR840 | Orbi WiFi 6 System AX5700 product patch
🔗 RBR850 | Orbi WiFi 6 Router AX6000 product patch
🔗 MR80 | Nighthawk Tri-band Mesh WiFi 6 Router product patch
🔗 CBR750 | Orbi WiFi 6 DOCSIS 3.1 Mesh WiFi Cable Modem Router product patch

https://www.cve.org/CVERecord?id=CVE-2026-0418

Same Patch Batch · NETGEAR · 2026-06-09 · 17 CVEs total

CVE-2026-0412		Insufficient input validation vulnerability in NETGEAR JR6150 Web UI
CVE-2026-0414		Insufficient Input Validation Allows Unauthorized Modification of Router Software in certa
CVE-2026-0420		Missing TLS certificate validation in NETGEAR's ReadyCloud client app
CVE-2026-0415		Insufficient input validation vulnerability in certain Orbi routers
CVE-2026-0417		Insufficient input validation in certain NETGEAR routers
CVE-2026-0416		Improper input validation in certain NETGEAR routers allows unauthorized modification of p
CVE-2026-0410		Insufficient input validation in certain NETGEAR routers
CVE-2026-0409		Netgear Orbi 370 Series Remote Code Execution vulnerability
CVE-2026-0411		A Sensitive Information Disclosure Vulnerability in NETGEAR Orbi Satellites
CVE-2026-0419		Insufficient input validation vulnerability in NETGEAR JR6150
CVE-2026-0413		Buffer overflow vulnerability in certain NETGEAR Nighthawk routers
CVE-2026-3088		Unauthenticated users can disrupt router operation
CVE-2026-9210		Certain NETGEAR routers allow authenticated administrators to gain unintended control of t
CVE-2026-9213		Insufficient input validation in certain NETGEAR routers
CVE-2026-9211		Certain NETGEAR routers allow unauthenticated users to gain control of the router
CVE-2026-9212		Insufficient authentication and input validation in certain NETGEAR products

IV. Related Vulnerabilities

Same vendor: NETGEAR

Same weakness: CWE-15

V. Comments for CVE-2026-0418

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-0418— Certain NETGEAR devices allow administrators to tamper with system

Quick assessment

Possible ATT&CK Techniques 1 AI

Affected Version Matrix 35

I. Basic Information for CVE-2026-0418

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2026-0418

III. Intelligence Information for CVE-2026-0418

Vendor Pages for CVE-2026-0418 (35)

Same Patch Batch · NETGEAR · 2026-06-09 · 17 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2026-0418

Leave a comment