CVE-2026-0418CWE-15

Certain NETGEAR devices allow administrators to tamper with system

Medium · published June 9, 2026

CVSS v4.0
4.3
EPSS
0%
Percentile
14.8
In the wild
Unconfirmed
What it is

Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network

to tamper with the system.

The record
Technical detail
CVSS v4.0
4.3 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/R:U/V:D/RE:L/U:Amber
EPSS
0.00245 · 14.8th percentile
Weakness
CWE-15 · External Control of System or Configuration Setting
Published
2026-06-09T15:50Z
EPSS history
Timeline
  • 09 JUN 15:50Z
    Certain NETGEAR devices allow administrators to tamper with system
    cvelistv5