Insufficient Input Validation in NETGEAR R7300 Router's PPPoE Setup
CVE-2026-107917

4.3MEDIUM

Key Information:

Vendor

Netgear

Status
Vendor
CVE Published:
13 October 2026

What is CVE-2026-107917?

The NETGEAR R7300 router has a vulnerability in its PPPoE Setup feature, where insufficient input validation allows authenticated administrators on the local network to execute unauthorized actions. This flaw was identified through extensive testing in a controlled research environment, indicating potential risks to the integrity of the router's operations if exploited. While the testing did not confirm the issue on actual production devices, the implications underscore the need for vigilance in router security practices.

Affected Version(s)

R7300DST 0

References

CVSS V4

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Security Research Center (SRC) @ Concordia University
.