high8.0
CVE-2026-0406
An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injections.
Impact
An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injections.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Xr1000v2 Firmware | before 1.1.2.34 |