CVE-2026-9211

Certain NETGEAR routers allow unauthenticated users to gain control of the router

State: Published
Severity: 5.2 Medium
Published: Jun 9, 2026
Updated: Jun 10, 2026
Reserved: May 21, 2026

Description

An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation.

Scores

CVSS	Score	Vector	Source
4.0	5.2 Medium	CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber	NETGEAR

Weaknesses

CWE-20 Improper input validation

Affected Products

Product	Versions
CAX30NETGEAR	before V2.2.1.4Affected
RAX30NETGEAR	before V1.0.10.94Affected
RAX5NETGEAR	before V1.0.5.34Affected
RAXE300NETGEAR	before V1.0.10.72Affected

References

https://www.netgear.com/support/product/cax30/productpatch
https://www.netgear.com/support/product/rax30/productpatch
https://www.netgear.com/support/product/rax5/productpatch
https://www.netgear.com/support/product/raxe300/productpatch
https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisoryvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.