CVE-2026-0410

Insufficient input validation in certain NETGEAR routers

1.9 Low

CVE-2026-0410 is a low vulnerability (CVSS 1.9) in Netgear R7000, published June 9, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 12th percentile. No source names a fixed version.

What does this mean?

Severity: 1.9 LowCVSS 4.0, CVE List
Exploit chance: 0.22%EPSS, 12th percentile
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: No fix listedNo source names one

Description

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.

Attack profile

How easy it is to exploit

Attack vector: Adjacent network
Complexity: High
Privileges needed: High
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: High
Availability: None

Exploit likelihood

0.22%Up 0.2 points since Jun 10, 2026

Affected products

Show 27 moreShow less

What each source reports

CVE List Score used1.9

Insufficient input validation in certain NETGEAR routers

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.

Record: CVE-2026-0410
CVSS 4.0: 1.9 LowCVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber
Weakness: CWE-20
Updated: 2026-11-02

EUVDEUVD-2026-354521.9

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.

Record: EUVD-2026-35452
CVSS 4.0: 1.9 LowCVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber
Updated: 2026-11-02

GitHub AdvisoriesGHSA-r224-q75m-hjpj1.9

Authenticated administrators connected to the local network can gain elevated access to the...

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.

Record: GHSA-r224-q75m-hjpj
CVSS 4.0: 1.9 LowCVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber
CVSS 3.1: 4.5 MediumCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Weakness: CWE-20
Updated: 2026-11-02

NVD1.9

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.

Record: CVE-2026-0410
CVSS 4.0: 1.9 LowCVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber
CVSS 3.1: 4.5 MediumCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Weakness: CWE-20
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 16 moreShow less