# CVE-2026-0418: Netgear Multiple Devices insufficient configuration management

Source: https://junglewise.ai/threats/cve-2026-0418-netgear-multiple-devices-insufficient-configuration-management  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-09. Updated: 2026-06-09  
License: CC BY 4.0 with a link back

CVE-2026-0418 · Severity: info · CVSS 4.3 · Published 2026-06-09

A configuration management vulnerability affects a wide range of Netgear networking devices, including Orbi systems and Nighthawk routers. An authorized administrator already connected to the local network could exploit this flaw to tamper with system settings beyond their intended permissions. This could lead to unauthorized changes in device behavior or security configurations.

## Quick answers

**Is CVE-2026-0418 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-0418 being exploited in the wild.

**How severe is CVE-2026-0418?** Informational severity, with a CVSS score of 4.3, published 9 June 2026.

**Which products and versions are affected?** Netgear CBR750; Netgear EX6120; Netgear EX6130; Netgear MR60; and 31 more.

**Is there a fix for CVE-2026-0418?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-0418 attacked?** It is attacked from the adjacent network, in a network appliance.

**Am I affected by CVE-2026-0418?** Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is classified as CWE-15 (External Control of System or Configuration Setting) due to insufficient configuration management. An attacker must have high privileges (authenticated administrator) and be located on the adjacent network (local network) to exploit the flaw. Successful exploitation allows the attacker to tamper with system settings, potentially bypassing intended configuration restrictions. The issue affects numerous Netgear product lines including RAX, RBR, and EX series. Netgear has acknowledged the issue, though specific firmware patch versions are not detailed in the NVD record.

## Affected products

- Netgear CBR750
- Netgear EX6120
- Netgear EX6130
- Netgear MR60
- Netgear MR70
- Netgear MR80
- Netgear MS60
- Netgear MS70
- Netgear MS80
- Netgear RAX15
- Netgear RAX20
- Netgear RAX200
- Netgear RAX35v2
- Netgear RAX38v2
- Netgear RAX40v2
- Netgear RAX42
- Netgear RAX43
- Netgear RAX45
- Netgear RAX48
- Netgear RAX50
- Netgear RAX50S
- Netgear RAX75
- Netgear RAX80
- Netgear RAXE450
- Netgear RAXE500
- Netgear RBR750
- Netgear RBR840
- Netgear RBR850
- Netgear RBRE960
- Netgear RBS750
- Netgear RBS840
- Netgear RBS850
- Netgear RBSE960
- Netgear RS700
- Netgear XR1000

## Timeline

- 2026-06-09: disclosed
- 2026-06-09: advisory

## References

- [https://www.netgear.com/support/product/cbr750/](https://www.netgear.com/support/product/cbr750/)
- [https://www.netgear.com/support/product/ex6120/](https://www.netgear.com/support/product/ex6120/)
- [https://www.netgear.com/support/product/ex6130/](https://www.netgear.com/support/product/ex6130/)
- [https://www.netgear.com/support/product/mr60/](https://www.netgear.com/support/product/mr60/)
- [https://www.netgear.com/support/product/mr70/](https://www.netgear.com/support/product/mr70/)
- [https://www.netgear.com/support/product/mr80/](https://www.netgear.com/support/product/mr80/)
- [https://www.netgear.com/support/product/ms60/](https://www.netgear.com/support/product/ms60/)