CVE-2026-0414: Insufficient Input Validation Allows Unauthorized Modification of Router Software in certain NETGEAR Routers
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
RBE970 Orbi Quad-band Mesh WiFi 7 Add-on Satelliteto a version that resolves this vulnerability.Fixed in V9.12.4.9
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0414?
The severity of CVE-2026-0414 is classified as medium with a CVSS score of 4.3.
How do I fix CVE-2026-0414?
To fix CVE-2026-0414, install the latest firmware version recommended by NETGEAR for your router model.
What are the consequences of CVE-2026-0414?
CVE-2026-0414 allows authenticated administrators to make unauthorized modifications to router software and functionality.
Which NETGEAR models are affected by CVE-2026-0414?
CVE-2026-0414 affects certain NETGEAR router models that have insufficient input validation.
What type of vulnerability is CVE-2026-0414?
CVE-2026-0414 is classified as a code injection vulnerability due to insufficient input validation.