CVE-2026-0414 — Insufficient Input Validation Allows Unauthorized Modification of Router Software in certain NETGEAR Routers

CVE-2026-0414

Insufficient Input Validation Allows Unauthorized Modification of Router Software in certain NETGEAR Routers PUBLISHED

Description (CNA)

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

Affected (CNA)

Vendor / product	Versions
NETGEAR / RBE970	affected 0 before V9.12.4.9

CWE

CWE-94

References

https://www.netgear.com/support/product/rbe970/
https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.