Insufficient input validation vulnerability in NETGEAR JR6150
CVE-2026-0419

4.4MEDIUM

Key Information:

Vendor

Netgear
Status
Jr6150
Vendor
CVE Published:
9 June 2026

What is CVE-2026-0419?

Insufficient input validation in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows users connected to the local WiFi Networks to execute operating system commands. NETGEAR JR6150 has reached End-of-Support phase as of 2018 , and no further security updates are planned. NETGEAR strongly recommends replacing these devices with newer NETGEAR models to ensure continued security support and updates.

This vulnerability has been identified through firmware emulation in a controlled research environment and has not been verified on production hardware.

Affected Version(s)

JR6150 0 <= 1.0.1.26

References

https://www.netgear.com/support/product/jr6150

CVSS V4

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Security Research Center (SRC) @ Concordia University
.