CVE-2026-107918: CWE-20 Improper input validation in NETGEAR R7300DST

This vulnerability involves improper input validation (CWE-20) in the LAN Setup feature of the NETGEAR R7300DST router. Authenticated administrators connected locally may exploit this flaw to perform unauthorized actions on the router. The finding is based on testing in a controlled research environment using a simulated version of the router's software; no confirmation exists for physical production devices. No known exploits are reported in the wild, and no patch or vendor advisory is currently available.

An authenticated administrator on the local network could leverage this vulnerability to perform unauthorized actions on the router, potentially affecting device configuration or operation. However, since the issue is only confirmed in a simulated environment and not on physical devices, the practical impact remains uncertain.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict administrative access to trusted personnel and networks to minimize risk.