Vulnerability Details CVE-2026-0414
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 8.8%
CVSS Severity
CVSS v3 Score 4.5
References
Products affected by CVE-2026-0414
-
cpe:2.3:h:netgear:rbe970:-
-
cpe:2.3:o:netgear:rbe970_firmware:9.10.0.2
-
cpe:2.3:o:netgear:rbe970_firmware:9.10.1.4
-
cpe:2.3:o:netgear:rbe970_firmware:9.10.2.3
-
cpe:2.3:o:netgear:rbe970_firmware:9.10.4.1
-
cpe:2.3:o:netgear:rbe970_firmware:9.11.1.1
-
cpe:2.3:o:netgear:rbe970_firmware:9.12.2.1
-
cpe:2.3:o:netgear:rbe970_firmware:9.12.2.6
-
cpe:2.3:o:netgear:rbe970_firmware:9.12.3.3