Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-107918— Insufficient input validation vulnerability in NETGEAR R7300

Quick assessment

Affected
NETGEAR R7300DST
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

NETGEAR R7300 路由器的 LAN 设置功能中存在输入验证不足漏洞，允许已通过本地网络身份验证的管理员在路由器上执行未授权操作。该问题是在受控研究环境中，使用模拟路由器软件进行测试时发现的，尚未在物理生产设备上得到确认。

CVSS 4.5 · Medium EPSS 0.15% · P4

Affected Version Matrix 1

VendorProduct Version RangeStatus
NETGEAR R7300DST ≤ V1 1.0.0.74 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-107918

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Insufficient input validation vulnerability in NETGEAR R7300
Source: CVE Program / CVE List V5
Vulnerability Description
Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
输入验证不恰当
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
NETGEAR R7300DST 0 ~ V1 1.0.0.74 -

II. Public POCs for CVE-2026-107918

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-107918

请登录查看更多情报信息。

Vendor Pages for CVE-2026-107918 (1)

Same Patch Batch · NETGEAR · 2026-10-13 · 6 CVEs total

CVE-2026-11732 8.8 HIGH Insufficient input validation vulnerability exists in website blocking feature of certain
CVE-2026-11731 8.8 HIGH Authentication Bypass Vulnerability in Certain NETGEAR RAX Series Models
CVE-2026-11730 5.4 MEDIUM Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models
CVE-2026-9218 4.5 MEDIUM Insufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized
CVE-2026-107917 4.5 MEDIUM Insufficient input validation vulnerability in NETGEAR R7300 router

IV. Related Vulnerabilities

Same product: R7300DST
Same vendor: NETGEAR
Same weakness: CWE-20

V. Comments for CVE-2026-107918

No comments yet

Leave a comment