CVSS 4.0
1.9 lowCVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:AmberCVE-2026-0410
Low (1.9) in netgear. EPSS 0.2% chance of exploitation in the next 30 days.
Authenticated administrators connected to the local network can gain
elevated access to the router and make unauthorized changes to router
software and functionality.
Severity
CVSS 3.1
4.5 mediumCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- netgear:r7000_firmware
- netgear:rax20_firmware
- netgear:rax35v2_firmware
- netgear:rax41_firmware
- netgear:rax41v2_firmware
- netgear:rax42_firmware
- netgear:rax42v2_firmware
- netgear:rax43_firmware
- netgear:rax43v2_firmware
- netgear:rax45_firmware
- netgear:rax49s_firmware
- netgear:rax50_firmware
- netgear:rax50s_firmware
- netgear:rax50v2_firmware
- netgear:rax54sv2_firmware
- netgear:raxe450_firmware
- netgear:raxe500_firmware
- netgear:xr1000_firmware
- netgear:xr1000v2_firmware