What is CVE-2026-0412?

CVE-2026-0412 is a medium-severity vulnerability in Netgear Jr6150, classified under Improper Input Validation. CVSS score: 4.5/10. Published 2026-06-09.

How severe is CVE-2026-0412?

Medium severity. CVSS v3 base score is 4.5 out of 10.

Improper input validation in Netgear Jr6150

CVE-2026-0412

Insufficient input validation vulnerability in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows administrators connected to the local network to make unauthorized modification of router software and fun…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.002 (4.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N.

Affected products

Netgear Jr6150 — versions 0
Netgear Jr6150_firmware

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

a2826606-91e7-4eb6-899e-8484bd4575d5 (Product)
a2826606-91e7-4eb6-899e-8484bd4575d5 (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2026-0412?: CVE-2026-0412 is a medium-severity vulnerability in Netgear Jr6150, classified under Improper Input Validation. CVSS score: 4.5/10. Published 2026-06-09.
How severe is CVE-2026-0412?: Medium severity. CVSS v3 base score is 4.5 out of 10.