CVE-2026-107918: Insufficient input validation vulnerability in NETGEAR R7300
Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Exploitation requires an authenticated administrator account and a connection to the router's local network. The available information does not indicate exposure to unauthenticated or remote internet-based attackers.
Is this confirmed to affect physical NETGEAR R7300 routers?
No. The issue was identified in controlled testing against a simulated version of the router software and has not been confirmed on physical production devices.
Which router function is involved?
The reported vulnerable area is the LAN Setup feature. An authenticated local administrator may be able to use insufficiently validated input there to perform unauthorized actions on the router.