Insufficient Input Validation in NETGEAR R7300 Router
CVE-2026-107918

4.3MEDIUM

Key Information:

Vendor

Netgear
Status
R7300dst
Vendor
CVE Published:
13 October 2026

What is CVE-2026-107918?

An insufficient input validation vulnerability in the LAN Setup feature of the NETGEAR R7300 router enables authenticated administrators on the local network to perform unauthorized actions. This issue was identified during controlled testing in a simulated environment, indicating potential risks for users of the router's software.

Affected Version(s)

R7300DST 0

References

https://www.netgear.com/support/product/r7300dst
productpatch

CVSS V4

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Security Research Center (SRC) @ Concordia University
.