Improper input validation in Netgear Raxe450
CVE-2026-0416
An insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated administrator with local network access to submit crafted input that bypasses intended management interface restrictions, res…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.002 (7.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N.
Affected products
- Netgear Raxe450 — versions V1.0.12.96
- Netgear Raxe450_firmware
- Netgear Raxe500 — versions V1.0.12.96
- Netgear Raxe500_firmware
Weakness classification (CWE)
References
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2026-0416?
- CVE-2026-0416 is a medium-severity vulnerability in Netgear Raxe450, classified under Improper Input Validation. CVSS score: 4.5/10. Published 2026-06-09.
- How severe is CVE-2026-0416?
- Medium severity. CVSS v3 base score is 4.5 out of 10.