CVE-2026-0410: NETGEAR r7000 Firmware

Medium severity, CVSS 4.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.

Affected products

NETGEAR r7000 Firmware: before 1.0.11.216 (fixed in 1.0.11.216)
NETGEAR RAX20 Firmware: before 1.0.18.144 (fixed in 1.0.18.144)
NETGEAR RAX35V2 Firmware: before 1.0.16.132 (fixed in 1.0.16.132)
NETGEAR RAX41 Firmware: before 1.0.16.132 (fixed in 1.0.16.132)
NETGEAR RAX41V2 Firmware: before 1.1.4.28 (fixed in 1.1.4.28)
NETGEAR RAX42 Firmware: before 1.0.16.132 (fixed in 1.0.16.132)
NETGEAR RAX42V2 Firmware: before 1.1.4.28 (fixed in 1.1.4.28)
NETGEAR RAX43 Firmware: before 1.0.16.132 (fixed in 1.0.16.132)
NETGEAR RAX43V2 Firmware: before 1.1.4.28 (fixed in 1.1.4.28)
NETGEAR RAX45 Firmware: before 1.0.16.132 (fixed in 1.0.16.132)
NETGEAR RAX49S Firmware: before 1.1.4.28 (fixed in 1.1.4.28)
NETGEAR RAX50 Firmware: before 1.0.16.132 (fixed in 1.0.16.132)
NETGEAR RAX50S Firmware: before 1.0.16.132 (fixed in 1.0.16.132)
NETGEAR RAX50V2 Firmware: before 1.1.4.28 (fixed in 1.1.4.28)
NETGEAR RAX54SV2 Firmware: before 1.1.4.28 (fixed in 1.1.4.28)
NETGEAR RAXE450 Firmware: before 1.2.14.114 (fixed in 1.2.14.114)
NETGEAR RAXE500 Firmware: before 1.2.14.114 (fixed in 1.2.14.114)
NETGEAR XR1000 Firmware: before 1.1.0.22 (fixed in 1.1.0.22)
NETGEAR XR1000V2 Firmware: before 1.1.0.22 (fixed in 1.1.0.22)

Published 2026-06-09. Last modified 2026-07-23.