Is CVE-2026-0416 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-0416 being exploited in the wild.

How severe is CVE-2026-0416?

Informational severity, with a CVSS score of 4.3, published 9 June 2026.

Is there a fix for CVE-2026-0416?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-0416 attacked?

It is attacked from the adjacent network, in a network appliance.

Am I affected by CVE-2026-0416?

Check whether you run NETGEAR RAXE450 or NETGEAR RAXE500. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-0416: Netgear RAXE450 and RAXE500 improper input validation in management interface

CVE-2026-0416 · Severity: info · CVSS 4.3 · Published 2026-06-09

A security vulnerability in certain Netgear Nighthawk routers allows an administrator already logged into the local network to bypass intended management restrictions. This could allow an authorized user to modify router settings or functionality in ways the manufacturer did not intend. While this requires existing administrative access, it represents a failure of the device's internal security controls.

Technologies: NETGEAR RAXE450, NETGEAR RAXE500. Vendors: NETGEAR.

Quick answers

Is CVE-2026-0416 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-0416 being exploited in the wild.
How severe is CVE-2026-0416?: Informational severity, with a CVSS score of 4.3, published 9 June 2026.
Which products and versions are affected?: Netgear RAXE450; Netgear RAXE500.
Is there a fix for CVE-2026-0416?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-0416 attacked?: It is attacked from the adjacent network, in a network appliance.
Am I affected by CVE-2026-0416?: Check whether you run NETGEAR RAXE450 or NETGEAR RAXE500. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is classified as improper input validation (CWE-20) within the management interface of Netgear RAXE450 and RAXE500 routers. An attacker with high privileges (authenticated administrator) and adjacent network access can exploit this flaw to bypass standard functional restrictions. This allows for unauthorized modification of router configuration or behavior that should be restricted even for administrative users. The vulnerability is tracked under CVE-2026-0416 and was reported by Netgear.

Affected products

Netgear RAXE450
Netgear RAXE500

Timeline

2026-06-09: disclosed: Initial disclosure by Netgear and NVD publication.

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.