CVE-2026-9210

Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router

State: Published
Severity: 4.9 Medium
Published: Jun 9, 2026
Updated: Jun 11, 2026
Reserved: May 21, 2026

Description

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

Scores

CVSS	Score	Vector	Source
4.0	4.9 Medium	CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber	NETGEAR

Weaknesses

CWE-20 Improper input validation

Affected Products

Product	Versions
EX3700NETGEAR	before V1.0.0.100Affected
EX3800NETGEAR	before V1.0.0.100Affected
EX6120NETGEAR	before V1.0.0.72Affected
EX6130NETGEAR	before V1.0.0.54Affected
MR60NETGEAR	before V1.1.7.132Affected
MR70NETGEAR	before V1.0.3.28Affected
MR80NETGEAR	before V1.1.7.14Affected
MS60NETGEAR	before V1.1.7.132Affected
MS70NETGEAR	before V1.0.3.28Affected
MS80NETGEAR	before V1.1.7.14Affected
R6400v2NETGEAR	before V1.0.4.128Affected
R6700v3NETGEAR	before V1.0.4.128Affected
R6900PNETGEAR	before V1.3.3.152Affected
R7000NETGEAR	before V1.0.11.216Affected
R7000PNETGEAR	before V1.3.3.152Affected
R7960PNETGEAR	before V1.4.4.92Affected
R8000PNETGEAR	before V1.4.4.92Affected
R8500NETGEAR	1.0.2.160 and earlierAffected
RAX20NETGEAR	before V1.0.18.144Affected
RAX35v2NETGEAR	before V1.0.12.118Affected
RAX40v2NETGEAR	before V1.0.12.118Affected
RAX41NETGEAR	before V1.0.12.118Affected
RAX42NETGEAR	before V1.0.12.118Affected
RAX43NETGEAR	before V1.0.12.120Affected
RAX45NETGEAR	before V1.0.12.118Affected
RAX48NETGEAR	before V1.0.12.118Affected
RAX50NETGEAR	before V1.0.12.120Affected
RAX50SNETGEAR	before V1.0.12.120Affected
RAXE450NETGEAR	before V1.0.10.86Affected
RAXE500NETGEAR	before V1.0.10.86Affected
XR1000NETGEAR	before V1.0.0.68Affected

References

https://www.netgear.com/support/product/ex3700/productpatch
https://www.netgear.com/support/product/ex3800/productpatch
https://www.netgear.com/support/product/ex6120/productpatch
https://www.netgear.com/support/product/mr60/productpatch
https://www.netgear.com/support/product/ex6130/productpatch
https://www.netgear.com/support/product/ms70/productpatch
https://www.netgear.com/support/product/ms60/productpatch
https://www.netgear.com/support/product/mr80/productpatch
https://www.netgear.com/support/product/ms80/productpatch
https://www.netgear.com/support/product/mr70/productpatch
https://www.netgear.com/support/product/r6400v2/productpatch
https://www.netgear.com/support/product/r6700v3/productpatch
https://www.netgear.com/support/product/r6900p/productpatch
https://www.netgear.com/support/product/r7960p/productpatch
https://www.netgear.com/support/product/r7000p/productpatch
https://www.netgear.com/support/product/r8000p/productpatch
https://www.netgear.com/support/product/r8500/product
https://www.netgear.com/support/product/rax48/productpatch
https://www.netgear.com/support/product/r7000/productpatch
https://www.netgear.com/support/product/rax40v2/productpatch
https://www.netgear.com/support/product/rax20/productpatch
https://www.netgear.com/support/product/rax35v2/productpatch
https://www.netgear.com/support/product/rax41/productpatch
https://www.netgear.com/support/product/rax42/productpatch
https://www.netgear.com/support/product/rax45/productpatch
https://www.netgear.com/support/product/rax50/productpatch
https://www.netgear.com/support/product/rax43/productpatch
https://www.netgear.com/support/product/rax50s/productpatch
https://www.netgear.com/support/product/raxe450/productpatch
https://www.netgear.com/support/product/raxe500/productpatch
https://www.netgear.com/support/product/xr1000/productpatch
https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisoryvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.