CVE-2026-9210
Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber
Affected products
NETGEAR · EX3700NETGEAR · EX3800NETGEAR · EX6120NETGEAR · EX6130NETGEAR · MR60NETGEAR · MR70NETGEAR · MR80NETGEAR · MS60NETGEAR · MS70NETGEAR · MS80NETGEAR · R6400v2NETGEAR · R6700v3NETGEAR · R6900PNETGEAR · R7000NETGEAR · R7000PNETGEAR · R7960PNETGEAR · R8000PNETGEAR · R8500NETGEAR · RAX20NETGEAR · RAX35v2NETGEAR · RAX40v2NETGEAR · RAX41NETGEAR · RAX42NETGEAR · RAX43NETGEAR · RAX45NETGEAR · RAX48NETGEAR · RAX50NETGEAR · RAX50SNETGEAR · RAXE450NETGEAR · RAXE500NETGEAR · XR1000Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisoryhttps://www.netgear.com/support/product/ex3700/https://www.netgear.com/support/product/ex3800/https://www.netgear.com/support/product/ex6120/https://www.netgear.com/support/product/ex6130/https://www.netgear.com/support/product/mr60/https://www.netgear.com/support/product/mr70/https://www.netgear.com/support/product/mr80/https://www.netgear.com/support/product/ms60/https://www.netgear.com/support/product/ms70/https://www.netgear.com/support/product/ms80/https://www.netgear.com/support/product/r6400v2/