CVE-2026-0415: NETGEAR Multiple Router Models insufficient input validation

CVE-2026-0415 · Severity: info · CVSS 4.3 · Published 2026-06-09

A security vulnerability exists in several NETGEAR router models that could allow an authorized administrator to make unauthorized changes to the device's software. To exploit this, an attacker would already need administrative credentials and be connected to the local network. This could lead to the modification of router functionality or the installation of unauthorized software updates.

Technologies: NETGEAR RBE970, NETGEAR RBR750, NETGEAR RBR840, NETGEAR RBR850, NETGEAR RBR860, NETGEAR RBRE950, NETGEAR RBRE960, NETGEAR RBS750, NETGEAR RBS840, NETGEAR RBS850, NETGEAR RBS860, NETGEAR RBSE950, NETGEAR RBSE960. Vendors: NETGEAR.

Quick answers

Is CVE-2026-0415 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-0415 being exploited in the wild.
How severe is CVE-2026-0415?
Informational severity, with a CVSS score of 4.3, published 9 June 2026.
Which products and versions are affected?
NETGEAR RBE970; NETGEAR RBR750; NETGEAR RBR840; NETGEAR RBR850; and 9 more.
Is there a fix for CVE-2026-0415?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-0415 attacked?
It is attacked from the adjacent network, in a network appliance.
Am I affected by CVE-2026-0415?
Check whether you run NETGEAR RBE970, NETGEAR RBR750, NETGEAR RBR840 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An improper input validation vulnerability (CWE-20) exists in the management interface of various NETGEAR router models. The flaw allows an attacker with high privileges (administrative access) and adjacent network access (local network) to bypass intended restrictions and modify the device's software or core functionality. While the exploit requires existing authentication, it allows for integrity violations that should normally be restricted even for administrative users. The vulnerability is tracked via CVSS 4.0 with a base score of 4.3, reflecting the high privilege requirement and lack of direct impact on confidentiality or availability.

Affected products

  • NETGEAR RBE970
  • NETGEAR RBR750
  • NETGEAR RBR840
  • NETGEAR RBR850
  • NETGEAR RBR860
  • NETGEAR RBRE950
  • NETGEAR RBRE960
  • NETGEAR RBS750
  • NETGEAR RBS840
  • NETGEAR RBS850
  • NETGEAR RBS860
  • NETGEAR RBSE950
  • NETGEAR RBSE960

Timeline

  • 2026-06-09: disclosed
  • 2026-06-09: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.