# CVE-2026-0410: Netgear Multiple Routers Privilege Escalation via Improper Input Validation

Source: https://junglewise.ai/threats/cve-2026-0410-netgear-multiple-routers-privilege-escalation-via-improper-input  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-09. Updated: 2026-06-09  
License: CC BY 4.0 with a link back

CVE-2026-0410 · Severity: info · CVSS 1.9 · Published 2026-06-09

A security vulnerability exists in several Netgear router models that could allow an already authenticated administrator to gain even higher levels of access. An attacker with existing administrative credentials who is also connected to the local network could use this flaw to make unauthorized changes to the router's software and core functionality. This could lead to a complete compromise of the device's integrity and the network traffic it manages.

## Quick answers

**Is CVE-2026-0410 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-0410 being exploited in the wild.

**How severe is CVE-2026-0410?** Informational severity, with a CVSS score of 1.9, published 9 June 2026.

**Which products and versions are affected?** Netgear R7000; Netgear RAX20; Netgear RAX35v2; Netgear RAX41; and 15 more.

**Is there a fix for CVE-2026-0410?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-0410 attacked?** It is attacked from the adjacent network, in a network appliance.

**Am I affected by CVE-2026-0410?** Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A vulnerability classified as Improper Input Validation (CWE-20) exists in multiple Netgear router models, including the R7000, RAX, and Nighthawk Pro Gaming series. The flaw allows an authenticated user with administrative privileges, who is connected via an adjacent network (local network), to achieve further privilege escalation. By exploiting this improper validation, an attacker can modify router software and system functionality. The attack requires high privileges and has a high complexity, as reflected in the CVSS 4.0 score of 1.9.

## Affected products

- Netgear R7000
- Netgear RAX20
- Netgear RAX35v2
- Netgear RAX41
- Netgear RAX41v2
- Netgear RAX42
- Netgear RAX42v2
- Netgear RAX43
- Netgear RAX43v2
- Netgear RAX45
- Netgear RAX49s
- Netgear RAX50
- Netgear RAX50s
- Netgear RAX50v2
- Netgear RAX54sv2
- Netgear RAXE450
- Netgear RAXE500
- Netgear XR1000
- Netgear XR1000v2

## Timeline

- 2026-06-09: disclosed: Initial publication of CVE-2026-0410

## References

- [https://www.netgear.com/support/product/r7000/](https://www.netgear.com/support/product/r7000/)
- [https://www.netgear.com/support/product/rax20/](https://www.netgear.com/support/product/rax20/)
- [https://www.netgear.com/support/product/rax35v2/](https://www.netgear.com/support/product/rax35v2/)
- [https://www.netgear.com/support/product/rax41/](https://www.netgear.com/support/product/rax41/)
- [https://www.netgear.com/support/product/rax41v2/](https://www.netgear.com/support/product/rax41v2/)
- [https://www.netgear.com/support/product/rax42/](https://www.netgear.com/support/product/rax42/)
- [https://www.netgear.com/support/product/rax42v2/](https://www.netgear.com/support/product/rax42v2/)