CVE-2026-9214

Insufficient input validation in NETGEAR R7000 router allows administrators to tamper with the device.

State: Published
Severity: 4.3 Medium
Published: Aug 11, 2026
Updated: Aug 12, 2026
Reserved: May 21, 2026

Description

Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.

Scores

CVSS	Score	Vector	Source
4.0	4.3 Medium	CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:L/U:Amber	NETGEAR

Weaknesses

CWE-20 Improper input validation

Affected Products

Product	Versions
R7000NETGEAR	V1.0.12.216Affected

References

https://www.netgear.com/support/product/r7000product
https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisoryvendor-advisorypatch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.