{ "dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": { "cveId": "CVE-2026-0418", "assignerOrgId": "a2826606-91e7-4eb6-899e-8484bd4575d5", "state": "PUBLISHED", "assignerShortName": "NETGEAR", "dateReserved": "2025-12-03T04:16:25.029Z", "datePublished": "2026-06-09T15:50:50.069Z", "dateUpdated": "2026-06-10T15:56:54.459Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "a2826606-91e7-4eb6-899e-8484bd4575d5", "shortName": "NETGEAR", "dateUpdated": "2026-06-10T15:56:54.459Z" }, "title": "Certain NETGEAR devices allow administrators to tamper with system", "datePublic": "2026-06-09T00:00:00.000Z", "problemTypes": [ { "descriptions": [ { "lang": "en", "cweId": "CWE-15", "description": "CWE-15 External control of system or configuration setting", "type": "CWE" } ] } ], "impacts": [ { "capecId": "CAPEC-184", "descriptions": [ { "lang": "en", "value": "CAPEC-184 Software Integrity Attack" } ] } ], "affected": [ { "vendor": "NETGEAR", "product": "CBR750", "versions": [ { "status": "affected", "version": "0", "lessThan": "v4.6.14.4", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "EX6120", "versions": [ { "status": "affected", "version": "0", "lessThanOrEqual": "1.0.0.72", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "EX6130", "versions": [ { "status": "affected", "version": "0", "lessThanOrEqual": "1.0.0.54", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "MR60", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.1.7.128", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "MR70", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.3.28", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "MR80", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.1.7.6", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "MS60", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.1.7.128", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "MS70", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.3.28", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "MS80", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.1.7.6", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX15", "versions": [ { "status": "affected", "version": "0", "lessThanOrEqual": "1.0.18.144", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX20", "versions": [ { "status": "affected", "version": "0", "lessThanOrEqual": "1.0.18.144", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX200", "versions": [ { "status": "affected", "version": "0", "lessThanOrEqual": "1.0.11.148", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX35v2", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.11.112", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX38v2", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.11.112", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX40v2", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.11.112", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX42", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.11.112", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX43", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.11.112", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX45", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.11.112", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX48", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.11.112", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX50", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.11.112", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX50S", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.11.112", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX75", "versions": [ { "status": "affected", "version": "0", "lessThanOrEqual": "1.0.11.148", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX80", "versions": [ { "status": "affected", "version": "0", "lessThanOrEqual": "1.0.11.148", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAXE450", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.10.86", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAXE500", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.10.86", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RBR750", "versions": [ { "status": "affected", "version": "0", "lessThan": "V4.6.14.3", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RBR840", "versions": [ { "status": "affected", "version": "0", "lessThan": "V4.6.14.3", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RBR850", "versions": [ { "status": "affected", "version": "0", "lessThan": "V4.6.14.3", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RBRE960", "versions": [ { "status": "affected", "version": "0", "lessThan": "V6.3.7.5", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RBS750", "versions": [ { "status": "affected", "version": "0", "lessThan": "V4.6.14.3", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RBS840", "versions": [ { "status": "affected", "version": "0", "lessThan": "V4.6.14.3", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RBS850", "versions": [ { "status": "affected", "version": "0", "lessThan": "V4.6.14.3", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RBSE960", "versions": [ { "status": "affected", "version": "0", "lessThan": "V6.3.7.5", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RS700", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.7.66", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "XR1000", "versions": [ { "status": "affected", "version": "0", "lessThan": "v1.0.0.68", "versionType": "custom" } ], "defaultStatus": "unaffected" } ], "descriptions": [ { "lang": "en", "value": "Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network\nto tamper with the system.", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "
Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network\nto tamper with the system.


" } ] } ], "references": [ { "url": "https://www.netgear.com/support/product/cbr750/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax15/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/ex6120/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax200/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax38v2/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax75/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/mr60/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax80/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rbr840/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rbr750/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rbs750/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/ex6130/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rbr850/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rbs840/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rbs850/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/ms60/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rs700/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/mr70/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/mr80/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/ms70/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax35v2/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax20/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/ms80/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax40v2/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax42/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax43/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax50/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/raxe500/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax48/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax50s/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rbse960/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/raxe450/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax45/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rbre960/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/xr1000/", "tags": [ "product", "patch" ] }, { "url": "https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory", "tags": [ "vendor-advisory" ] } ], "metrics": [ { "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ], "cvssV4_0": { "attackVector": "ADJACENT", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "NONE", "exploitMaturity": "UNREPORTED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "USER", "valueDensity": "DIFFUSE", "vulnerabilityResponseEffort": "LOW", "providerUrgency": "AMBER", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 4.3, "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/R:U/V:D/RE:L/U:Amber" } } ], "solutions": [ { "lang": "en", "value": "Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:\n\nProductFixed VersionCBR750 Orbi WiFi 6 DOCSIS 3.1 Mesh WiFi Cable Modem Router v4.6.14.4 https://www.netgear.com/support/product/cbr750/ EX6120 (EoS) AC1200 Dual Band WiFi Range ExtenderEOSEX6130 (EoS) AC1200 WiFi Range ExtenderEOSMR60 Nighthawk Mesh WiFi 6 Router V1.1.7.128 https://www.netgear.com/support/product/mr60/ MR70 Nighthawk Mesh WiFi 6 Router V1.0.3.28 https://www.netgear.com/support/product/mr70/ MR80 Nighthawk Tri-band Mesh WiFi 6 Router V1.1.7.6 https://www.netgear.com/support/product/mr80/ MS60 Nighthawk Mesh WiFi 6 Add-on Satellite V1.1.7.128 https://www.netgear.com/support/product/ms60/ MS70 Nighthawk Mesh WiFi 6 Add-on Satellite V1.0.3.28 https://www.netgear.com/support/product/ms70/ MS80 Nighthawk Tri-band Mesh WiFi 6 Add-on Satellite V1.1.7.6 https://www.netgear.com/support/product/ms80/ RAX15(EoS) 4-Stream AX1800 WiFi 6 RouterEOSRAX20 (EoS) 4-Stream AX1800 WiFi 6 RouterEOSRAX200 (EoS) Nighthawk Tri-Band AX12 12-Stream WiFi RouterEOSRAX35v2 Nighthawk AX4 4-Stream AX3000 WiFi 6 Router V1.0.11.112 https://www.netgear.com/support/product/rax35v2/ RAX38v2 Nighthawk AX4 4-Stream AX3000 WiFi Router V1.0.11.112 https://www.netgear.com/support/product/rax38v2/ RAX40v2 Nighthawk AX4 4-Stream WiFi Router V1.0.11.112 https://www.netgear.com/support/product/rax40v2/ RAX42 (EoS) Nighthawk AX5 5-Stream AX4200 WiFi Router V1.0.11.112 https://www.netgear.com/support/product/rax42/ RAX43 (EoS) Nighthawk AX5 5-Stream AX4200 WiFi Router V1.0.11.112 https://www.netgear.com/support/product/rax43/ RAX45 (EoS) Nighthawk AX6 6-Stream AX4300 WiFi Router V1.0.11.112 https://www.netgear.com/support/product/rax45/ RAX48 Nighthawk AX6 6-Stream AX5200 WiFi 6 Router V1.0.11.112 https://www.netgear.com/support/product/rax48/ RAX50 Nighthawk AX6 6-Stream AX5400 WiFi 6 Router V1.0.11.112 https://www.netgear.com/support/product/rax50/ RAX50S Nighthawk AX6 6-Stream AX5400 WiFi 6 Router V1.0.11.112 https://www.netgear.com/support/product/rax50s/ RAX75 (EoS) Nighthawk AX8 8-Stream AX5700 WiFi 6 RouterEOSRAX80 (EoS) Nighthawk AX8 8-Stream WiFi RouterEOSRAXE450 Nighthawk AXE10000 Tri-Band WiFi 6E Router V1.0.10.86 https://www.netgear.com/support/product/raxe450/ RAXE500 Nighthawk AX12 12-Stream AXE11000 Tri-Band WiFi 6E Router V1.0.10.86 https://www.netgear.com/support/product/raxe500/ RBR750 Orbi WiFi 6 Router AX4200 V4.6.14.3 https://www.netgear.com/support/product/rbr750/ RBR840 (EoS) Orbi WiFi 6 System AX5700 V4.6.14.3 https://www.netgear.com/support/product/rbr840/ RBR850 Orbi WiFi 6 Router AX6000 V4.6.14.3 https://www.netgear.com/support/product/rbr850/ RBRE960 Orbi Quad-band Mesh WiFi 6E Router V6.3.7.5 https://www.netgear.com/support/product/rbre960/ RBS750 Orbi WiFi 6 Add-on Satellite AX4200 V4.6.14.3 https://www.netgear.com/support/product/rbs750/ RBS840 (EoS) Orbi WiFi 6 Add-on Satellite AX5700 V4.6.14.3 https://www.netgear.com/support/product/rbs840/ RBS850 Orbi WiFi 6 Satellite AX6000 V4.6.14.3 https://www.netgear.com/support/product/rbs850/ RBSE960 Orbi Quad-band Mesh WiFi 6E Add-on Satellite V6.3.7.5 https://www.netgear.com/support/product/rbse960/ RS700 Nighthawk BE19000 WiFi 7 Tri-Band Router V1.0.7.66 https://www.netgear.com/support/product/rs700/ XR1000 Nighthawk WiFi 6 Pro Gaming Router v1.0.0.68 https://www.netgear.com/support/product/xr1000/ \n\nModels marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "

Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:

ProductFixed Version
CBR750 Orbi WiFi 6 DOCSIS 3.1 Mesh WiFi Cable Modem Routerv4.6.14.4
EX6120 (EoS) AC1200 Dual Band WiFi Range ExtenderEOS
EX6130 (EoS) AC1200 WiFi Range ExtenderEOS
MR60 Nighthawk Mesh WiFi 6 RouterV1.1.7.128
MR70 Nighthawk Mesh WiFi 6 RouterV1.0.3.28
MR80 Nighthawk Tri-band Mesh WiFi 6 RouterV1.1.7.6
MS60 Nighthawk Mesh WiFi 6 Add-on SatelliteV1.1.7.128
MS70 Nighthawk Mesh WiFi 6 Add-on SatelliteV1.0.3.28
MS80 Nighthawk Tri-band Mesh WiFi 6 Add-on SatelliteV1.1.7.6
RAX15(EoS) 4-Stream AX1800 WiFi 6 RouterEOS
RAX20 (EoS) 4-Stream AX1800 WiFi 6 RouterEOS
RAX200 (EoS) Nighthawk Tri-Band AX12 12-Stream WiFi RouterEOS
RAX35v2 Nighthawk AX4 4-Stream AX3000 WiFi 6 RouterV1.0.11.112
RAX38v2 Nighthawk AX4 4-Stream AX3000 WiFi RouterV1.0.11.112
RAX40v2 Nighthawk AX4 4-Stream WiFi RouterV1.0.11.112
RAX42 (EoS) Nighthawk AX5 5-Stream AX4200 WiFi RouterV1.0.11.112
RAX43 (EoS) Nighthawk AX5 5-Stream AX4200 WiFi RouterV1.0.11.112
RAX45 (EoS) Nighthawk AX6 6-Stream AX4300 WiFi RouterV1.0.11.112
RAX48 Nighthawk AX6 6-Stream AX5200 WiFi 6 RouterV1.0.11.112
RAX50 Nighthawk AX6 6-Stream AX5400 WiFi 6 RouterV1.0.11.112
RAX50S Nighthawk AX6 6-Stream AX5400 WiFi 6 RouterV1.0.11.112
RAX75 (EoS) Nighthawk AX8 8-Stream AX5700 WiFi 6 RouterEOS
RAX80 (EoS) Nighthawk AX8 8-Stream WiFi RouterEOS
RAXE450 Nighthawk AXE10000 Tri-Band WiFi 6E RouterV1.0.10.86
RAXE500 Nighthawk AX12 12-Stream AXE11000 Tri-Band WiFi 6E RouterV1.0.10.86
RBR750 Orbi WiFi 6 Router AX4200V4.6.14.3
RBR840 (EoS) Orbi WiFi 6 System AX5700V4.6.14.3
RBR850 Orbi WiFi 6 Router AX6000V4.6.14.3
RBRE960 Orbi Quad-band Mesh WiFi 6E RouterV6.3.7.5
RBS750 Orbi WiFi 6 Add-on Satellite AX4200V4.6.14.3
RBS840 (EoS) Orbi WiFi 6 Add-on Satellite AX5700V4.6.14.3
RBS850 Orbi WiFi 6 Satellite AX6000V4.6.14.3
RBSE960 Orbi Quad-band Mesh WiFi 6E Add-on SatelliteV6.3.7.5
RS700 Nighthawk BE19000 WiFi 7 Tri-Band RouterV1.0.7.66
XR1000 Nighthawk WiFi 6 Pro Gaming Routerv1.0.0.68

Models marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.

" } ] } ], "credits": [ { "lang": "en", "value": "byte_blaster", "type": "finder" } ], "source": { "discovery": "EXTERNAL" }, "x_generator": { "engine": "Vulnogram 1.0.3" } }, "adp": [ { "metrics": [ { "other": { "type": "ssvc", "content": { "timestamp": "2026-06-09T17:08:11.783284Z", "id": "CVE-2026-0418", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "version": "2.0.3" } } } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-09T17:09:21.456Z" } } ] } }