{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-0418","assignerOrgId":"a2826606-91e7-4eb6-899e-8484bd4575d5","state":"PUBLISHED","assignerShortName":"NETGEAR","dateReserved":"2025-12-03T04:16:25.029Z","datePublished":"2026-06-09T15:50:50.069Z","dateUpdated":"2026-06-10T15:56:54.459Z"},"containers":{"cna":{"providerMetadata":{"orgId":"a2826606-91e7-4eb6-899e-8484bd4575d5","shortName":"NETGEAR","dateUpdated":"2026-06-10T15:56:54.459Z"},"title":"Certain NETGEAR devices allow administrators to tamper with system","datePublic":"2026-06-09T00:00:00.000Z","problemTypes":[{"descriptions":[{"lang":"en","cweId":"CWE-15","description":"CWE-15 External control of system or configuration setting","type":"CWE"}]}],"impacts":[{"capecId":"CAPEC-184","descriptions":[{"lang":"en","value":"CAPEC-184 Software Integrity Attack"}]}],"affected":[{"vendor":"NETGEAR","product":"CBR750","versions":[{"status":"affected","version":"0","lessThan":"v4.6.14.4","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"EX6120","versions":[{"status":"affected","version":"0","lessThanOrEqual":"1.0.0.72","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"EX6130","versions":[{"status":"affected","version":"0","lessThanOrEqual":"1.0.0.54","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"MR60","versions":[{"status":"affected","version":"0","lessThan":"V1.1.7.128","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"MR70","versions":[{"status":"affected","version":"0","lessThan":"V1.0.3.28","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"MR80","versions":[{"status":"affected","version":"0","lessThan":"V1.1.7.6","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"MS60","versions":[{"status":"affected","version":"0","lessThan":"V1.1.7.128","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"MS70","versions":[{"status":"affected","version":"0","lessThan":"V1.0.3.28","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"MS80","versions":[{"status":"affected","version":"0","lessThan":"V1.1.7.6","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RAX15","versions":[{"status":"affected","version":"0","lessThanOrEqual":"1.0.18.144","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RAX20","versions":[{"status":"affected","version":"0","lessThanOrEqual":"1.0.18.144","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RAX200","versions":[{"status":"affected","version":"0","lessThanOrEqual":"1.0.11.148","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RAX35v2","versions":[{"status":"affected","version":"0","lessThan":"V1.0.11.112","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RAX38v2","versions":[{"status":"affected","version":"0","lessThan":"V1.0.11.112","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RAX40v2","versions":[{"status":"affected","version":"0","lessThan":"V1.0.11.112","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RAX42","versions":[{"status":"affected","version":"0","lessThan":"V1.0.11.112","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RAX43","versions":[{"status":"affected","version":"0","lessThan":"V1.0.11.112","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RAX45","versions":[{"status":"affected","version":"0","lessThan":"V1.0.11.112","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RAX48","versions":[{"status":"affected","version":"0","lessThan":"V1.0.11.112","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RAX50","versions":[{"status":"affected","version":"0","lessThan":"V1.0.11.112","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RAX50S","versions":[{"status":"affected","version":"0","lessThan":"V1.0.11.112","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RAX75","versions":[{"status":"affected","version":"0","lessThanOrEqual":"1.0.11.148","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RAX80","versions":[{"status":"affected","version":"0","lessThanOrEqual":"1.0.11.148","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RAXE450","versions":[{"status":"affected","version":"0","lessThan":"V1.0.10.86","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RAXE500","versions":[{"status":"affected","version":"0","lessThan":"V1.0.10.86","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RBR750","versions":[{"status":"affected","version":"0","lessThan":"V4.6.14.3","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RBR840","versions":[{"status":"affected","version":"0","lessThan":"V4.6.14.3","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RBR850","versions":[{"status":"affected","version":"0","lessThan":"V4.6.14.3","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RBRE960","versions":[{"status":"affected","version":"0","lessThan":"V6.3.7.5","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RBS750","versions":[{"status":"affected","version":"0","lessThan":"V4.6.14.3","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RBS840","versions":[{"status":"affected","version":"0","lessThan":"V4.6.14.3","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RBS850","versions":[{"status":"affected","version":"0","lessThan":"V4.6.14.3","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RBSE960","versions":[{"status":"affected","version":"0","lessThan":"V6.3.7.5","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"RS700","versions":[{"status":"affected","version":"0","lessThan":"V1.0.7.66","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"NETGEAR","product":"XR1000","versions":[{"status":"affected","version":"0","lessThan":"v1.0.0.68","versionType":"custom"}],"defaultStatus":"unaffected"}],"descriptions":[{"lang":"en","value":"Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network\nto tamper with the system.","supportingMedia":[{"type":"text/html","base64":false,"value":"
Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network\nto tamper with the system.


"}]}],"references":[{"url":"https://www.netgear.com/support/product/cbr750/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rax15/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/ex6120/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rax200/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rax38v2/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rax75/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/mr60/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rax80/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rbr840/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rbr750/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rbs750/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/ex6130/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rbr850/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rbs840/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rbs850/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/ms60/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rs700/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/mr70/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/mr80/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/ms70/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rax35v2/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rax20/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/ms80/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rax40v2/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rax42/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rax43/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rax50/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/raxe500/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rax48/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rax50s/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rbse960/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/raxe450/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rax45/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rbre960/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/xr1000/","tags":["product","patch"]},{"url":"https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"HIGH","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","subConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","subIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"UNREPORTED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"USER","valueDensity":"DIFFUSE","vulnerabilityResponseEffort":"LOW","providerUrgency":"AMBER","version":"4.0","baseSeverity":"MEDIUM","baseScore":4.3,"vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/R:U/V:D/RE:L/U:Amber"}}],"solutions":[{"lang":"en","value":"Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:\n\nProductFixed VersionCBR750 Orbi WiFi 6 DOCSIS 3.1 Mesh WiFi Cable Modem Router v4.6.14.4 https://www.netgear.com/support/product/cbr750/ EX6120 (EoS) AC1200 Dual Band WiFi Range ExtenderEOSEX6130 (EoS) AC1200 WiFi Range ExtenderEOSMR60 Nighthawk Mesh WiFi 6 Router V1.1.7.128 https://www.netgear.com/support/product/mr60/ MR70 Nighthawk Mesh WiFi 6 Router V1.0.3.28 https://www.netgear.com/support/product/mr70/ MR80 Nighthawk Tri-band Mesh WiFi 6 Router V1.1.7.6 https://www.netgear.com/support/product/mr80/ MS60 Nighthawk Mesh WiFi 6 Add-on Satellite V1.1.7.128 https://www.netgear.com/support/product/ms60/ MS70 Nighthawk Mesh WiFi 6 Add-on Satellite V1.0.3.28 https://www.netgear.com/support/product/ms70/ MS80 Nighthawk Tri-band Mesh WiFi 6 Add-on Satellite V1.1.7.6 https://www.netgear.com/support/product/ms80/ RAX15(EoS) 4-Stream AX1800 WiFi 6 RouterEOSRAX20 (EoS) 4-Stream AX1800 WiFi 6 RouterEOSRAX200 (EoS) Nighthawk Tri-Band AX12 12-Stream WiFi RouterEOSRAX35v2 Nighthawk AX4 4-Stream AX3000 WiFi 6 Router V1.0.11.112 https://www.netgear.com/support/product/rax35v2/ RAX38v2 Nighthawk AX4 4-Stream AX3000 WiFi Router V1.0.11.112 https://www.netgear.com/support/product/rax38v2/ RAX40v2 Nighthawk AX4 4-Stream WiFi Router V1.0.11.112 https://www.netgear.com/support/product/rax40v2/ RAX42 (EoS) Nighthawk AX5 5-Stream AX4200 WiFi Router V1.0.11.112 https://www.netgear.com/support/product/rax42/ RAX43 (EoS) Nighthawk AX5 5-Stream AX4200 WiFi Router V1.0.11.112 https://www.netgear.com/support/product/rax43/ RAX45 (EoS) Nighthawk AX6 6-Stream AX4300 WiFi Router V1.0.11.112 https://www.netgear.com/support/product/rax45/ RAX48 Nighthawk AX6 6-Stream AX5200 WiFi 6 Router V1.0.11.112 https://www.netgear.com/support/product/rax48/ RAX50 Nighthawk AX6 6-Stream AX5400 WiFi 6 Router V1.0.11.112 https://www.netgear.com/support/product/rax50/ RAX50S Nighthawk AX6 6-Stream AX5400 WiFi 6 Router V1.0.11.112 https://www.netgear.com/support/product/rax50s/ RAX75 (EoS) Nighthawk AX8 8-Stream AX5700 WiFi 6 RouterEOSRAX80 (EoS) Nighthawk AX8 8-Stream WiFi RouterEOSRAXE450 Nighthawk AXE10000 Tri-Band WiFi 6E Router V1.0.10.86 https://www.netgear.com/support/product/raxe450/ RAXE500 Nighthawk AX12 12-Stream AXE11000 Tri-Band WiFi 6E Router V1.0.10.86 https://www.netgear.com/support/product/raxe500/ RBR750 Orbi WiFi 6 Router AX4200 V4.6.14.3 https://www.netgear.com/support/product/rbr750/ RBR840 (EoS) Orbi WiFi 6 System AX5700 V4.6.14.3 https://www.netgear.com/support/product/rbr840/ RBR850 Orbi WiFi 6 Router AX6000 V4.6.14.3 https://www.netgear.com/support/product/rbr850/ RBRE960 Orbi Quad-band Mesh WiFi 6E Router V6.3.7.5 https://www.netgear.com/support/product/rbre960/ RBS750 Orbi WiFi 6 Add-on Satellite AX4200 V4.6.14.3 https://www.netgear.com/support/product/rbs750/ RBS840 (EoS) Orbi WiFi 6 Add-on Satellite AX5700 V4.6.14.3 https://www.netgear.com/support/product/rbs840/ RBS850 Orbi WiFi 6 Satellite AX6000 V4.6.14.3 https://www.netgear.com/support/product/rbs850/ RBSE960 Orbi Quad-band Mesh WiFi 6E Add-on Satellite V6.3.7.5 https://www.netgear.com/support/product/rbse960/ RS700 Nighthawk BE19000 WiFi 7 Tri-Band Router V1.0.7.66 https://www.netgear.com/support/product/rs700/ XR1000 Nighthawk WiFi 6 Pro Gaming Router v1.0.0.68 https://www.netgear.com/support/product/xr1000/ \n\nModels marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.","supportingMedia":[{"type":"text/html","base64":false,"value":"

Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:

ProductFixed Version
CBR750 Orbi WiFi 6 DOCSIS 3.1 Mesh WiFi Cable Modem Routerv4.6.14.4
EX6120 (EoS) AC1200 Dual Band WiFi Range ExtenderEOS
EX6130 (EoS) AC1200 WiFi Range ExtenderEOS
MR60 Nighthawk Mesh WiFi 6 RouterV1.1.7.128
MR70 Nighthawk Mesh WiFi 6 RouterV1.0.3.28
MR80 Nighthawk Tri-band Mesh WiFi 6 RouterV1.1.7.6
MS60 Nighthawk Mesh WiFi 6 Add-on SatelliteV1.1.7.128
MS70 Nighthawk Mesh WiFi 6 Add-on SatelliteV1.0.3.28
MS80 Nighthawk Tri-band Mesh WiFi 6 Add-on SatelliteV1.1.7.6
RAX15(EoS) 4-Stream AX1800 WiFi 6 RouterEOS
RAX20 (EoS) 4-Stream AX1800 WiFi 6 RouterEOS
RAX200 (EoS) Nighthawk Tri-Band AX12 12-Stream WiFi RouterEOS
RAX35v2 Nighthawk AX4 4-Stream AX3000 WiFi 6 RouterV1.0.11.112
RAX38v2 Nighthawk AX4 4-Stream AX3000 WiFi RouterV1.0.11.112
RAX40v2 Nighthawk AX4 4-Stream WiFi RouterV1.0.11.112
RAX42 (EoS) Nighthawk AX5 5-Stream AX4200 WiFi RouterV1.0.11.112
RAX43 (EoS) Nighthawk AX5 5-Stream AX4200 WiFi RouterV1.0.11.112
RAX45 (EoS) Nighthawk AX6 6-Stream AX4300 WiFi RouterV1.0.11.112
RAX48 Nighthawk AX6 6-Stream AX5200 WiFi 6 RouterV1.0.11.112
RAX50 Nighthawk AX6 6-Stream AX5400 WiFi 6 RouterV1.0.11.112
RAX50S Nighthawk AX6 6-Stream AX5400 WiFi 6 RouterV1.0.11.112
RAX75 (EoS) Nighthawk AX8 8-Stream AX5700 WiFi 6 RouterEOS
RAX80 (EoS) Nighthawk AX8 8-Stream WiFi RouterEOS
RAXE450 Nighthawk AXE10000 Tri-Band WiFi 6E RouterV1.0.10.86
RAXE500 Nighthawk AX12 12-Stream AXE11000 Tri-Band WiFi 6E RouterV1.0.10.86
RBR750 Orbi WiFi 6 Router AX4200V4.6.14.3
RBR840 (EoS) Orbi WiFi 6 System AX5700V4.6.14.3
RBR850 Orbi WiFi 6 Router AX6000V4.6.14.3
RBRE960 Orbi Quad-band Mesh WiFi 6E RouterV6.3.7.5
RBS750 Orbi WiFi 6 Add-on Satellite AX4200V4.6.14.3
RBS840 (EoS) Orbi WiFi 6 Add-on Satellite AX5700V4.6.14.3
RBS850 Orbi WiFi 6 Satellite AX6000V4.6.14.3
RBSE960 Orbi Quad-band Mesh WiFi 6E Add-on SatelliteV6.3.7.5
RS700 Nighthawk BE19000 WiFi 7 Tri-Band RouterV1.0.7.66
XR1000 Nighthawk WiFi 6 Pro Gaming Routerv1.0.0.68

Models marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.

"}]}],"credits":[{"lang":"en","value":"byte_blaster","type":"finder"}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 1.0.3"}},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-06-09T17:08:11.783284Z","id":"CVE-2026-0418","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-06-09T17:09:21.456Z"}}]}}