CVEvulnerability

CVE-2026-107917

4.3 MEDIUM Published 2026-10-13 Modified 2026-10-16 Official page ↗
Status
Awaiting Analysis
Published
2026-10-13
Last modified
2026-10-16
Assigner
a2826606-91e7-4eb6-899e-8484bd4575d5
CVSS 4.0 (a2826606-91e7-4eb6-899e-8484bd4575d5)
4.3 MEDIUM — CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber
CVSS 3.1 (a2826606-91e7-4eb6-899e-8484bd4575d5)
4.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-20

Description

Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References