EUVD-2026-56194
GHSA-c3g8-7w99-c2xp
Severity by source
CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:D/RE:L/U:Amber
AV:A for adjacent-only access, AC:H for exploitation complexity, PR:H for mandatory admin credentials; integrity-only impact with no confidentiality or availability effect.
Primary rating from Vendor (NETGEAR).
CVSS VectorVendor: NETGEAR
CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:D/RE:L/U:Amber
Lifecycle Timeline
1DescriptionCVE.org
A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.
AnalysisAI
Stack-based buffer overflow in multiple NETGEAR router models (R7000, RAX and XR series) allows an authenticated admin user on an adjacent network to make unauthorized modifications to the router's software and functionality. Exploitation is highly constrained by CVSS 4.0 metrics - adjacent network access, high attack complexity, and pre-existing administrative credentials are all required, yielding an extremely low composite score of 1.9. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires three simultaneous conditions: (1) the attacker must be on an adjacent network to the router (AV:A - same LAN segment, not reachable over the public internet); (2) the attacker must possess valid administrative credentials for the router's management interface (PR:H - full admin access, not a lower-privilege user account); and (3) high attack complexity (AC:H) must be met, indicating that exploitation likely requires precise firmware-specific knowledge such as stack offsets or gadget addresses. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 1.9 accurately reflects the layered exploitation constraints. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who has already obtained administrative credentials to an affected NETGEAR router - via credential reuse, phishing, or a prior compromise - and is positioned on the same LAN segment could send a specially crafted request to the router's admin interface, triggering a stack buffer overflow that allows unauthorized modification of the router's firmware or operational configuration. The high attack complexity (AC:H) means exploitation likely requires precise knowledge of the firmware's stack layout, making casual or automated exploitation unlikely. … |
| Remediation | Patch available per vendor advisory - apply the latest firmware update for each affected NETGEAR model via the device admin panel or NETGEAR's support pages. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Insufficient input validation across 30+ NETGEAR router, range extender, and mesh networking models enables local networ
Integrity tampering in NETGEAR router and mesh network firmware allows authenticated administrators on the local network
**Potential prompt injection detected — flagging before proceeding.** The CVE data you provided contains an embedded "E
Insufficient input validation across three NETGEAR router models - R7000, RAXE500, and RS700 - permits authenticated adm
Integrity controls on multiple NETGEAR router firmware lines can be subverted by authenticated administrators on the loc
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Stack Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today