ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2026-0415

—
CVSS 4.0
4.3 medium
EPSS
<1%p14
Published
()
Modified
Description

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

Vendors
netgear
Products
rbe970 firmware, rbr750 firmware, rbr840 firmware, rbr850 firmware, rbr860 firmware, rbre950 firmware, rbre960 firmware, rbs750 firmware, rbs840 firmware, rbs850 firmware, rbs860 firmware, rbse950 firmware
Weakness
CWE-20
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.