← CVE Intelligence

CVE-2026-9210

Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router PUBLISHED

Description (CNA)

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

Affected (CNA)

Vendor / productVersions
NETGEAR / EX3700affected 0 before V1.0.0.100
NETGEAR / EX3800affected 0 before V1.0.0.100
NETGEAR / EX6120affected 0 before V1.0.0.72
NETGEAR / EX6130affected 0 before V1.0.0.54
NETGEAR / MR60affected 0 before V1.1.7.132
NETGEAR / MR70affected 0 before V1.0.3.28
NETGEAR / MR80affected 0 before V1.1.7.14
NETGEAR / MS60affected 0 before V1.1.7.132
NETGEAR / MS70affected 0 before V1.0.3.28
NETGEAR / MS80affected 0 before V1.1.7.14
NETGEAR / R6400v2affected 0 before V1.0.4.128
NETGEAR / R6700v3affected 0 before V1.0.4.128
NETGEAR / R6900Paffected 0 before V1.3.3.152
NETGEAR / R7000affected 0 before V1.0.11.216
NETGEAR / R7000Paffected 0 before V1.3.3.152
NETGEAR / R7960Paffected 0 before V1.4.4.92
NETGEAR / R8000Paffected 0 before V1.4.4.92
NETGEAR / R8500affected 0 through 1.0.2.160
NETGEAR / RAX20affected 0 before V1.0.18.144
NETGEAR / RAX35v2affected 0 before V1.0.12.118
NETGEAR / RAX40v2affected 0 before V1.0.12.118
NETGEAR / RAX41affected 0 before V1.0.12.118
NETGEAR / RAX42affected 0 before V1.0.12.118
NETGEAR / RAX43affected 0 before V1.0.12.120
NETGEAR / RAX45affected 0 before V1.0.12.118
NETGEAR / RAX48affected 0 before V1.0.12.118
NETGEAR / RAX50affected 0 before V1.0.12.120
NETGEAR / RAX50Saffected 0 before V1.0.12.120
NETGEAR / RAXE450affected 0 before V1.0.10.86
NETGEAR / RAXE500affected 0 before V1.0.10.86
NETGEAR / XR1000affected 0 before V1.0.0.68

CWE

CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.