CVE-2026-0416

Katalog CVE

CVSS 4.5 · Medium EPSS 0,18%

Kerentanan Improper Input Validation pada netgear raxe450 firmware, netgear raxe500 firmware. Skor CVSS 3.1 4.5 (Medium) menurut NVD.

Deskripsi (NVD)

An insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated administrator with local network access to submit crafted input that bypasses intended management interface restrictions, resulting in unauthorized modification of protected router software or functionality.

Rincian

Terbit di NVD

9 Juni 2026

Terakhir diubah

23 Juli 2026

Status NVD

Analyzed

CVSS 3.1

4.5 (Medium), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation

EPSS (30 hari)

0,18% peluang dieksploitasi; lebih tinggi dari 6,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory advisory vendor
• https://www.netgear.com/support/product/raxe450/ product
• https://www.netgear.com/support/product/raxe500/ product