SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityAnalyzed

CVE-2026-0410

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.

LOW 1.9EPSS 0.22%

Does this matter?

Lower severity and a low EPSS score (0.22%). Track it; it rarely justifies an emergency change on its own.

Description

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.

CVSS 4.0
1.9 LOWCVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS
0.22% probability · 12th percentile
CISA KEV
Not listed
Weakness
CWE-20
Affected
netgear/r7000 firmware · netgear/rax20 firmware · netgear/rax35v2 firmware · netgear/rax41 firmware · netgear/rax41v2 firmware · netgear/rax42 firmware · netgear/rax42v2 firmware · netgear/rax43 firmware · netgear/rax43v2 firmware · netgear/rax45 firmware · netgear/rax49s firmware · netgear/rax50 firmware · netgear/rax50s firmware · netgear/rax50v2 firmware · netgear/rax54sv2 firmware · netgear/raxe450 firmware · netgear/raxe500 firmware · netgear/xr1000 firmware · netgear/xr1000v2 firmware
Source
a2826606-91e7-4eb6-899e-8484bd4575d5

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.