Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-107917— Insufficient input validation vulnerability in NETGEAR R7300 router

Quick assessment

Affected
NETGEAR R7300DST
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

NETGEAR R7300 路由器的 PPPoE 设置功能存在输入验证不足的漏洞，允许连接到本地网络且已认证的 administrator（管理员）对路由器执行未经授权的操作。该问题是通过在受控研究环境中使用模拟路由器软件测试识别出的，尚未在实际生产设备上得到确认。

CVSS 4.5 · Medium EPSS 0.15% · P4

Possible ATT&CK Techniques 1 AI

T1548.002 · Bypass User Account Control

Affected Version Matrix 1

VendorProduct Version RangeStatus
NETGEAR R7300DST ≤ V1.0.0.74 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-107917

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Insufficient input validation vulnerability in NETGEAR R7300 router
Source: CVE Program / CVE List V5
Vulnerability Description
Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
输入验证不恰当
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
NETGEAR R7300DST 0 ~ V1.0.0.74 -

II. Public POCs for CVE-2026-107917

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-107917

请登录查看更多情报信息。

Vendor Pages for CVE-2026-107917 (1)

Same Patch Batch · NETGEAR · 2026-10-13 · 6 CVEs total

CVE-2026-11732 8.8 HIGH Insufficient input validation vulnerability exists in website blocking feature of certain
CVE-2026-11731 8.8 HIGH Authentication Bypass Vulnerability in Certain NETGEAR RAX Series Models
CVE-2026-11730 5.4 MEDIUM Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models
CVE-2026-9218 4.5 MEDIUM Insufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized
CVE-2026-107918 4.5 MEDIUM Insufficient input validation vulnerability in NETGEAR R7300

IV. Related Vulnerabilities

Same product: R7300DST
Same vendor: NETGEAR
Same weakness: CWE-20

V. Comments for CVE-2026-107917

No comments yet

Leave a comment