CVE-2026-0406

No fix known EPSS <1%CVSS 6.1

An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injections.

Published 2026-01-13 · CVE record · OSV

Products: NETGEAR XR1000v2