CVE-2026-107918

Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.

CVSS 4.0

4.3CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber

CVSS 3.1

4.5CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

EPSS

0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-25)

CWE

CWE-20

Published

2026-10-13

Modified

2026-10-16

Record from

the NVD, synced 2026-10-19

References

• https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory
• https://www.netgear.com/support/product/r7300dst

Check your stackJSON