CVE-2026-107917: NETGEAR r7300dst

Medium severity, CVSS 4.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.

Affected products

• NETGEAR r7300dst: up to and including V1.0.0.74

Published 2026-10-13. Last modified 2026-10-16.