CVE Feed

    Dashboard / CVE / CVE-2026-0418

    CVE-2026-0418

    Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.

    Published:Jun 9, 2026
    Last Modified:Jun 10, 2026
    EPS:Jun 9, 2026
    EPSS Score:0.00026
    CVSS Score:4.3

    Affected Products

    Vendor
    Netgear
    Product
    Cbr750
    Vendor
    Netgear
    Product
    Ex6120
    Vendor
    Netgear
    Product
    Ex6130
    Vendor
    Netgear
    Product
    Mr60
    Vendor
    Netgear
    Product
    Mr70
    Vendor
    Netgear
    Product
    Mr80
    Vendor
    Netgear
    Product
    Ms60
    Vendor
    Netgear
    Product
    Ms70
    Vendor
    Netgear
    Product
    Ms80
    Vendor
    Netgear
    Product
    Rax15
    Vendor
    Netgear
    Product
    Rax20
    Vendor
    Netgear
    Product
    Rax200
    Vendor
    Netgear
    Product
    Rax35v2
    Vendor
    Netgear
    Product
    Rax38v2
    Vendor
    Netgear
    Product
    Rax40v2
    Vendor
    Netgear
    Product
    Rax42
    Vendor
    Netgear
    Product
    Rax43
    Vendor
    Netgear
    Product
    Rax45
    Vendor
    Netgear
    Product
    Rax48
    Vendor
    Netgear
    Product
    Rax50
    Vendor
    Netgear
    Product
    Rax50s
    Vendor
    Netgear
    Product
    Rax75
    Vendor
    Netgear
    Product
    Rax80
    Vendor
    Netgear
    Product
    Raxe450
    Vendor
    Netgear
    Product
    Raxe500
    Vendor
    Netgear
    Product
    Rbr750
    Vendor
    Netgear
    Product
    Rbr840
    Vendor
    Netgear
    Product
    Rbr850
    Vendor
    Netgear
    Product
    Rbre960
    Vendor
    Netgear
    Product
    Rbs750
    Vendor
    Netgear
    Product
    Rbs840
    Vendor
    Netgear
    Product
    Rbs850
    Vendor
    Netgear
    Product
    Rbse960
    Vendor
    Netgear
    Product
    Rs700
    Vendor
    Netgear
    Product
    Xr1000

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-0405 (CVSS 6.1) — An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to…
    CVE-2021-45502 (CVSS 9.6) — Certain NETGEAR devices are affected by authentication bypass. This affects CBR750 before 4.6.3.6, RBK752 befo…
    CVE-2021-45503 (CVSS 9.6) — Certain NETGEAR devices are affected by authentication bypass. This affects CBR750 before 4.6.3.6, RBK752 befo…
    CVE-2021-45504 (CVSS 9.6) — Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, CBR750 befo…
    CVE-2021-45505 (CVSS 9.6) — Certain NETGEAR devices are affected by authentication bypass. This affects CBR750 before 4.6.3.6, RBK752 befo…
    CVE-2021-45506 (CVSS 9.6) — Certain NETGEAR devices are affected by authentication bypass. This affects CBR750 before 4.6.3.6, RBK752 befo…
    CVE-2021-45507 (CVSS 9.6) — Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, CBR750 befo…
    CVE-2021-45508 (CVSS 9.6) — Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, CBR750 befo…
    CVE-2021-45596 (CVSS 8.4) — Certain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR750 before…
    CVE-2021-45597 (CVSS 8.4) — Certain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR40 before …

    References

    https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory
    https://www.netgear.com/support/product/cbr750/
    https://www.netgear.com/support/product/ex6120/
    https://www.netgear.com/support/product/ex6130/
    https://www.netgear.com/support/product/mr60/
    https://www.netgear.com/support/product/mr70/
    https://www.netgear.com/support/product/mr80/
    https://www.netgear.com/support/product/ms60/
    https://www.netgear.com/support/product/ms70/
    https://www.netgear.com/support/product/ms80/
    https://www.netgear.com/support/product/rax15/
    https://www.netgear.com/support/product/rax20/
    https://www.netgear.com/support/product/rax200/
    https://www.netgear.com/support/product/rax35v2/
    https://www.netgear.com/support/product/rax38v2/
    https://www.netgear.com/support/product/rax40v2/
    https://www.netgear.com/support/product/rax42/
    https://www.netgear.com/support/product/rax43/
    https://www.netgear.com/support/product/rax45/
    https://www.netgear.com/support/product/rax48/
    https://www.netgear.com/support/product/rax50/
    https://www.netgear.com/support/product/rax50s/
    https://www.netgear.com/support/product/rax75/
    https://www.netgear.com/support/product/rax80/
    https://www.netgear.com/support/product/raxe450/
    https://www.netgear.com/support/product/raxe500/
    https://www.netgear.com/support/product/rbr750/
    https://www.netgear.com/support/product/rbr840/
    https://www.netgear.com/support/product/rbr850/
    https://www.netgear.com/support/product/rbre960/
    https://www.netgear.com/support/product/rbs750/
    https://www.netgear.com/support/product/rbs840/
    https://www.netgear.com/support/product/rbs850/
    https://www.netgear.com/support/product/rbse960/
    https://www.netgear.com/support/product/rs700/
    https://www.netgear.com/support/product/xr1000/

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High