CVE-2026-0406

An insufficient input validation vulnerability in the NETGEAR XR1000v2
allows attackers connected to the router’s LAN to execute OS command
injections.

More information : https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory