This vulnerability (CVE-2026-0416) affects the NETGEAR RAXE450 router model running firmware version V1.0.12.96. It stems from improper input validation (CWE-20) that enables an authenticated administrator on the local network to bypass intended restrictions in the management interface. This bypass can lead to unauthorized changes to protected router software or functionality. The CVSS 4.0 vector indicates the attack requires local network access with high privileges and no user interaction, with a medium impact on integrity and availability. No vendor-provided patch or remediation level is currently documented.

An attacker with authenticated administrator access on the local network can exploit this vulnerability to bypass management interface restrictions and modify protected router software or functionality without authorization. This could compromise the integrity and availability of the router's management features. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict administrative access to trusted users only and limit local network access to the router management interface to reduce risk.