CVE-2026-0416: Improper input validation in certain NETGEAR routers allows unauthorized modification of protected router functionality

Published Jun 9, 2026

Updated

An insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated administrator with local network access to submit crafted input that bypasses intended management interface restrictions, resulting in unauthorized modification of protected router software or functionality.

Affected Software

1 affected component

Netgear NETGEAR routers

Remediation

Information

Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in: ProductFixed VersionRAXE450 Nighthawk AXE10000 Tri-Band WiFi 6E Router V1.2.14.114 https://www.netgear.com/support/product/raxe450/ RAXE500 Nighthawk AX12 12-Stream AXE11000 Tri-Band WiFi 6E Router V1.2.14.114 https://www.netgear.com/support/product/raxe500/

Event History

Jun 9, 2026

CVE Published

via MITRE·03:50 PM

Data Sourced

via MITRE·03:50 PM

RemedyDescriptionWeakness

Data Sourced

via NVD·05:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-0416?

The severity of CVE-2026-0416 is medium, with a CVSS score of 4.3.

How do I fix CVE-2026-0416?

To fix CVE-2026-0416, check the firmware version of your NETGEAR router and update it to the latest version if not already applied.

What type of vulnerability is CVE-2026-0416?

CVE-2026-0416 is an input validation vulnerability in certain NETGEAR routers.

Who is affected by CVE-2026-0416?

CVE-2026-0416 affects authenticated administrators with local network access to specific NETGEAR router models.

What can an attacker do with CVE-2026-0416?

An attacker can exploit CVE-2026-0416 to submit crafted input that bypasses management interface restrictions, leading to unauthorized modifications of protected router functionality.