CVE-2026-0406

An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injections.

Score

CVSS 3.1 8.0 High

Status

Analyzed - a2826606-91e7-4eb6-899e-8484bd4575d5

Published

2026-01-13

Last modified

2026-02-26

Weaknesses

CWE-20

Affected products

• Xr1000v2 (Netgear)
• Xr1000v2 Firmware (Netgear)

References

• https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory
• https://www.netgear.com/support/product/xr1000v2