{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0418", "assignerOrgId": "a2826606-91e7-4eb6-899e-8484bd4575d5", "state": "PUBLISHED", "assignerShortName": "NETGEAR", "dateReserved": "2025-12-03T04:16:25.029Z", "datePublished": "2026-06-09T15:50:50.069Z", "dateUpdated": "2026-06-09T17:09:21.456Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "a2826606-91e7-4eb6-899e-8484bd4575d5", "shortName": "NETGEAR", "dateUpdated": "2026-06-09T15:50:50.069Z"}, "title": "Certain NETGEAR devices allow administrators to tamper with system", "datePublic": "2026-06-09T00:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-15", "description": "CWE-15 External control of system or configuration setting", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-184", "descriptions": [{"lang": "en", "value": "CAPEC-184 Software Integrity Attack"}]}], "affected": [{"vendor": "NETGEAR", "product": "CBR750", "versions": [{"status": "affected", "version": "0", "lessThan": "v4.6.14.4", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "EX6120", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.0.0.72", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "EX6130", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.0.0.54", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "MR60", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.1.7.128", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "MR70", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.3.28", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "MR80", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.1.7.6", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "MS60", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.1.7.128", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "MS70", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.3.28", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "MS80", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.1.7.6", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAX15", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.0.18.144", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAX20", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.0.18.144", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAX200", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.0.11.148", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAX35v2", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.11.112", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAX38v2", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.11.112", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAX40v2", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.11.112", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAX42", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.11.112", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAX43", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.11.112", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAX45", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.11.112", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAX48", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.11.112", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAX50", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.11.112", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAX50S", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.11.112", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAX75", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.0.11.148", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAX80", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.0.11.148", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAXE450", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.10.86", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAXE500", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.10.86", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBR750", "versions": [{"status": "affected", "version": "0", "lessThan": "V4.6.14.3", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBR840", "versions": [{"status": "affected", "version": "0", "lessThan": "V4.6.14.3", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBR850", "versions": [{"status": "affected", "version": "0", "lessThan": "V4.6.14.3", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBRE960", "versions": [{"status": "affected", "version": "0", "lessThan": "V6.3.7.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBS750", "versions": [{"status": "affected", "version": "0", "lessThan": "V4.6.14.3", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBS840", "versions": [{"status": "affected", "version": "0", "lessThan": "V4.6.14.3", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBS850", "versions": [{"status": "affected", "version": "0", "lessThan": "V4.6.14.3", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBSE960", "versions": [{"status": "affected", "version": "0", "lessThan": "V6.3.7.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RS700", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.7.66", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "XR1000", "versions": [{"status": "affected", "version": "0", "lessThan": "v1.0.0.68", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Insufficient configuration management in the listed devices\u00a0allows authenticated administrators connected to the local network\nto tamper with the system.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><span><span>Insufficient configuration management in the listed devices </span></span><span>allows authenticated administrators connected to the local network\n</span><span>to tamper with the system.</span></div><div><br></div><p><br></p>"}]}], "references": [{"url": "https://www.netgear.com/support/product/cbr750/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rax15/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/ex6120/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rax200/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rax38v2/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rax75/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/mr60/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rax80/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbr840/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbr750/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbs750/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/ex6130/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbr850/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbs840/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbs850/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/ms60/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rs700/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/mr70/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/mr80/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/ms70/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rax35v2/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rax20/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/ms80/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rax40v2/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rax42/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rax43/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rax50/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/raxe500/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rax48/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rax50s/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbse960/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/raxe450/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rax45/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbre960/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/xr1000/", "tags": ["product", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "ADJACENT", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "NONE", "exploitMaturity": "UNREPORTED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "USER", "valueDensity": "DIFFUSE", "vulnerabilityResponseEffort": "LOW", "providerUrgency": "AMBER", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 4.3, "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/R:U/V:D/RE:L/U:Amber"}}], "solutions": [{"lang": "en", "value": "NETGEAR strongly recommends that you install the\nlatest firmware as soon as possible.\n\n\n\nIssue fixed in:\n\nProductFixed VersionCBR750v4.6.14.4EX6120*EOSEX6130*EOSMR60V1.1.7.128MR70V1.0.3.28MR80V1.1.7.6MS60V1.1.7.128MS70V1.0.3.28MS80V1.1.7.6RAX15*EOSRAX20*EOSRAX200*EOSRAX35v2V1.0.11.112RAX38v2V1.0.11.112RAX40v2V1.0.11.112RAX42*V1.0.11.112RAX43*V1.0.11.112RAX45*V1.0.11.112RAX48V1.0.11.112RAX50V1.0.11.112RAX50SV1.0.11.112RAX75*EOSRAX80*EOSRAXE450V1.0.10.86RAXE500V1.0.10.86RBR750V4.6.14.3RBR840*V4.6.14.3RBR850V4.6.14.3RBRE960V6.3.7.5RBS750V4.6.14.3RBS840*V4.6.14.3RBS850V4.6.14.3RBSE960V6.3.7.5RS700 V1.0.7.66 https://www.netgear.com/support/product/rs700/ XR1000v1.0.0.68\n\n*\nModel has reached its End-of-Support phase and no future security updates are\nplanned. NETGEAR strongly recommends that you retire this device and upgrade to\na newer NETGEAR product for continued security support.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p><span>NETGEAR strongly recommends that you install the\nlatest firmware as soon as possible.</span></p><p><span>Issue f</span><span>ixed in:</span></p><table><thead><tr><th>Product</th><th>Fixed Version</th></tr></thead><tbody><tr><td>CBR750</td><td>v4.6.14.4</td></tr><tr><td>EX6120*</td><td>EOS</td></tr><tr><td>EX6130*</td><td>EOS</td></tr><tr><td>MR60</td><td>V1.1.7.128</td></tr><tr><td>MR70</td><td>V1.0.3.28</td></tr><tr><td>MR80</td><td>V1.1.7.6</td></tr><tr><td>MS60</td><td>V1.1.7.128</td></tr><tr><td>MS70</td><td>V1.0.3.28</td></tr><tr><td>MS80</td><td>V1.1.7.6</td></tr><tr><td>RAX15*</td><td>EOS</td></tr><tr><td>RAX20*</td><td>EOS</td></tr><tr><td>RAX200*</td><td>EOS</td></tr><tr><td>RAX35v2</td><td>V1.0.11.112</td></tr><tr><td>RAX38v2</td><td>V1.0.11.112</td></tr><tr><td>RAX40v2</td><td>V1.0.11.112</td></tr><tr><td>RAX42*</td><td>V1.0.11.112</td></tr><tr><td>RAX43*</td><td>V1.0.11.112</td></tr><tr><td>RAX45*</td><td>V1.0.11.112</td></tr><tr><td>RAX48</td><td>V1.0.11.112</td></tr><tr><td>RAX50</td><td>V1.0.11.112</td></tr><tr><td>RAX50S</td><td>V1.0.11.112</td></tr><tr><td>RAX75*</td><td>EOS</td></tr><tr><td>RAX80*</td><td>EOS</td></tr><tr><td>RAXE450</td><td>V1.0.10.86</td></tr><tr><td>RAXE500</td><td>V1.0.10.86</td></tr><tr><td>RBR750</td><td>V4.6.14.3</td></tr><tr><td>RBR840*</td><td>V4.6.14.3</td></tr><tr><td>RBR850</td><td>V4.6.14.3</td></tr><tr><td>RBRE960</td><td>V6.3.7.5</td></tr><tr><td>RBS750</td><td>V4.6.14.3</td></tr><tr><td>RBS840*</td><td>V4.6.14.3</td></tr><tr><td>RBS850</td><td>V4.6.14.3</td></tr><tr><td>RBSE960</td><td>V6.3.7.5</td></tr><tr><td>RS700</td><td><a href=\"https://www.netgear.com/support/product/rs700/\">V1.0.7.66</a></td></tr><tr><td>XR1000</td><td>v1.0.0.68</td></tr></tbody></table><p><span>*\nModel has reached its End-of-Support phase and no future security updates are\nplanned. NETGEAR strongly recommends that you retire this device and upgrade to\na newer NETGEAR product for continued security support.</span></p>"}]}], "credits": [{"lang": "en", "value": "byte_blaster", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.3"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-09T17:08:11.783284Z", "id": "CVE-2026-0418", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-09T17:09:21.456Z"}}]}}
MITRE
Vulnrichment
NVD
Redhat
OpenCVE Enrichment