CVE-2026-0414

Name of the Vulnerable Software and Affected Versions NETGEAR (affected versions not specified) October CMS (affected versions not specified)

Description Insufficient input validation in certain NETGEAR models allows authenticated administrators on the local network to perform unauthorized modifications to the router software and functionality.

October CMS is affected by Stored Cross-Site Scripting (XSS), a flaw where malicious scripts are permanently stored on the target server and executed in the browser of users who visit the affected page.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.