Is CVE-2026-107917 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-107917 being exploited in the wild.

How severe is CVE-2026-107917?

Medium severity, with a CVSS score of 4.5, published 13 October 2026.

Is there a fix for CVE-2026-107917?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-107917 attacked?

It is attacked with local access, in a network appliance.

Am I affected by CVE-2026-107917?

Check whether you run NETGEAR R7300 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-107917: NETGEAR R7300 insufficient input validation in PPPoE Setup

CVE-2026-107917 · Severity: medium · CVSS 4.5 · Published 2026-10-13

The NETGEAR R7300 router has a flaw in its PPPoE configuration feature that allows authenticated administrators on the local network to perform unauthorized actions. An attacker with admin credentials could potentially compromise the router's integrity and settings. This vulnerability has only been tested in a controlled research environment and has not been confirmed on production devices.

Vendors: NETGEAR.

Quick answers

Is CVE-2026-107917 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-107917 being exploited in the wild.
How severe is CVE-2026-107917?: Medium severity, with a CVSS score of 4.5, published 13 October 2026.
Which products and versions are affected?: NETGEAR R7300 unspecified.
Is there a fix for CVE-2026-107917?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-107917 attacked?: It is attacked with local access, in a network appliance.
Am I affected by CVE-2026-107917?: Check whether you run NETGEAR R7300 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An insufficient input validation vulnerability exists in the PPPoE Setup feature that allows authenticated administrators connected to the local network to execute unauthorized commands. The vulnerability requires the attacker to have administrator credentials and local network access. While the flaw was identified through simulated testing, it has not been confirmed on actual production hardware.

Affected products

NETGEAR R7300 unspecified

Timeline

2026-10-13: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.