Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2026-9212 Details
Description
Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.
Metrics
CVSS 4.0 Severity and Vector Strings:
CNA: Netgear, Inc.CVSS-B:8.3 HIGHVector:CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 10, 2026Exploitation: NoneAutomatable: NoTechnical Impact: Total
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-20 | Improper Input Validation | Netgear, Inc. |
| CWE-306 | Missing Authentication for Critical Function | Netgear, Inc. |
Affected Products
| Product | Versions |
|---|---|
| netgear lbr1020 firmware | < 2.6.4.60 |
CPE
Remediation
| |
| netgear lbr1020 | All versions |
CPE
Remediation
| |
| netgear lbr20 firmware | < 2.7.6.8 |
CPE
Remediation
| |
| netgear lbr20 | All versions |
CPE
Remediation
| |
| netgear r6700ax firmware | All versions |
CPE
Remediation
| |
| netgear r6700ax | All versions |
CPE
Remediation
| |
| netgear r7800 firmware | < 1.0.4.96 |
CPE
Remediation
| |
| netgear r7800 | All versions |
CPE
Remediation
| |
| netgear r9000 firmware | < 1.0.6.46 |
CPE
Remediation
| |
| netgear r9000 | All versions |
CPE
Remediation
| |
| netgear rax10 firmware | < 1.0.5.50 |
CPE
Remediation
| |
| netgear rax10 | All versions |
CPE
Remediation
| |
| netgear rax120 firmware | < 1.2.10.56 |
CPE
Remediation
| |
| netgear rax120 | 1.0 2.0 |
CPE
Remediation
| |
| netgear rax36s firmware | < 1.0.5.50 |
CPE
Remediation
| |
| netgear rax36s | All versions |
CPE
Remediation
| |
| netgear rax70 firmware | < 1.0.19.172 |
CPE
Remediation
| |
| netgear rax70 | All versions |
CPE
Remediation
| |
| netgear rax78 firmware | < 1.0.19.172 |
CPE
Remediation
| |
| netgear rax78 | All versions |
CPE
Remediation
| |
| netgear rbr10 firmware | All versions |
CPE
Remediation
| |
| netgear rbr10 | All versions |
CPE
Remediation
| |
| netgear rbr20 firmware | All versions |
CPE
Remediation
| |
| netgear rbr20 | All versions |
CPE
Remediation
| |
| netgear rbr350 firmware | < 4.4.2.1 |
CPE
Remediation
| |
| netgear rbr350 | All versions |
CPE
Remediation
| |
| netgear rbr40 firmware | All versions |
CPE
Remediation
| |
| netgear rbr40 | All versions |
CPE
Remediation
| |
| netgear rbr50 firmware | All versions |
CPE
Remediation
| |
| netgear rbr50 | All versions |
CPE
Remediation
| |
| netgear rbs10 firmware | All versions |
CPE
Remediation
| |
| netgear rbs10 | All versions |
CPE
Remediation
| |
| netgear rbs20 firmware | All versions |
CPE
Remediation
| |
| netgear rbs20 | All versions |
CPE
Remediation
| |
| netgear rbs350 firmware | < 4.4.2.1 |
CPE
Remediation
| |
| netgear rbs350 | All versions |
CPE
Remediation
| |
| netgear rbs40 firmware | All versions |
CPE
Remediation
| |
| netgear rbs40 | All versions |
CPE
Remediation
| |
| netgear rbs50 firmware | All versions |
CPE
Remediation
| |
| netgear rbs50 | All versions |
CPE
Remediation
| |
| netgear xr450 firmware | < 2.3.3.136 |
CPE
Remediation
| |
| netgear xr450 | All versions |
CPE
Remediation
| |
| netgear xr500 firmware | < 2.3.3.136 |
CPE
Remediation
| |
| netgear xr500 | All versions |
CPE
Remediation
| |
Change History
7 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 23, 2026 | CVE Translated | [email protected] |
| Jun 18, 2026 | Initial Analysis | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | Netgear, Inc. |
| Jun 11, 2026 | CVE Modified | Netgear, Inc. |
| Jun 10, 2026 | CVE Modified | Netgear, Inc. |
| Jun 9, 2026 | New CVE Received | Netgear, Inc. |