CVEvulnerability

CVE-2026-9212

5.6 MEDIUM Published 2026-06-09 Modified 2026-07-23 Official page ↗
Status
Analyzed
Published
2026-06-09
Last modified
2026-07-23
Assigner
a2826606-91e7-4eb6-899e-8484bd4575d5
CVSS 4.0 (a2826606-91e7-4eb6-899e-8484bd4575d5)
5.6 MEDIUM — CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
8.0 HIGH — CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-20, CWE-306

Description

Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.

Affected configurations

• netgear lbr1020 firmware (< 2.6.4.60) • netgear lbr20 firmware (< 2.7.6.8) • netgear r6700ax firmware • netgear r7800 firmware (< 1.0.4.96) • netgear r9000 firmware (< 1.0.6.46) • netgear rax10 firmware (< 1.0.5.50) • netgear rax120 firmware (< 1.2.10.56) • netgear rax36s firmware (< 1.0.5.50) • netgear rax70 firmware (< 1.0.19.172) • netgear rax78 firmware (< 1.0.19.172) • netgear rbr10 firmware • netgear rbr20 firmware • netgear rbr350 firmware (< 4.4.2.1) • netgear rbr40 firmware • netgear rbr50 firmware • netgear rbs10 firmware • netgear rbs20 firmware • netgear rbs350 firmware (< 4.4.2.1) • netgear rbs40 firmware • netgear rbs50 firmware • netgear xr450 firmware (< 2.3.3.136) • netgear xr500 firmware (< 2.3.3.136)

Related

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-306 Missing Authentication for Critical Functionality weakness

References