High severity8.0NVD Advisory· Published Jan 13, 2026· Updated Jun 17, 2026

CVE-2026-0406

Description

An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injections.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgear/Xr1000v2 Firmware
cpe:2.3:o:netgear:xr1000v2_firmware:*:*:*:*:*:*:*:*
Range: <1.1.2.34
Netgear/XR1000v2llm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

kb.netgear.com/000070442/January-2026-NETGEAR-Security-AdvisorynvdPatchVendor Advisory
www.netgear.com/support/product/xr1000v2nvdPatchProduct

News mentions

No linked articles in our index yet.

cvss	0.520
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000