CVSS 4.0
4.3 mediumCVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/R:U/V:D/RE:L/U:AmberCVE-2026-0418
Medium (4.3) in netgear. EPSS 0.2% chance of exploitation in the next 30 days.
Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network
to tamper with the system.
Severity
CVSS 3.1
4.5 mediumCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-610, CWE-15
- Published
- Modified
- Record from
- the NVD, synced
Affected
- netgear:cbr750_firmware
- netgear:ex6120_firmware
- netgear:ex6130_firmware
- netgear:mr60_firmware
- netgear:mr70_firmware
- netgear:mr80_firmware
- netgear:ms60_firmware
- netgear:ms70_firmware
- netgear:ms80_firmware
- netgear:rax15_firmware
- netgear:rax200_firmware
- netgear:rax20_firmware
- netgear:rax35v2_firmware
- netgear:rax38v2_firmware
- netgear:rax40v2_firmware
- netgear:rax42_firmware
- netgear:rax43_firmware
- netgear:rax45_firmware
- netgear:rax48_firmware
- netgear:rax50_firmware
- netgear:rax50s_firmware
- netgear:rax75_firmware
- netgear:rax80_firmware
- netgear:raxe450_firmware
- netgear:raxe500_firmware
- netgear:rbr750_firmware
- netgear:rbr840_firmware
- netgear:rbr850_firmware
- netgear:rbre960_firmware
- netgear:rbs750_firmware
- netgear:rbs840_firmware
- netgear:rbs850_firmware
- netgear:rbse960_firmware
- netgear:rs700_firmware
- netgear:xr1000_firmware