Improper input validation in Netgear Jr6150
CVE-2026-0419
Insufficient input validation in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows users connected to the local WiFi Networks to execute operating system commands. NETGEAR JR6150 has reached End-of-Suppo…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.003 (21.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Netgear Jr6150 — versions 0
- Netgear Jr6150_firmware
Weakness classification (CWE)
References
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2026-0419?
- CVE-2026-0419 is a high-severity vulnerability in Netgear Jr6150, classified under Improper Input Validation. CVSS score: 8.0/10. Published 2026-06-09.
- How severe is CVE-2026-0419?
- High severity. CVSS v3 base score is 8.0 out of 10.