InfoSec Signals™
Sign InStart Free
Back to CVE records
Medium 4.5Published Jun 9, 2026

CVE-2026-9210Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and fu…

Updated under an hour ago ()

Does this affect you?

It affects netgear ex3700_firmware and 30 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

CVSS
4.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Weakness (CWE)
CWE-20
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Not given
NVD analysis
Analyzed
Record last updated
Jul 23, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
netgear ex3700_firmware
netgear:ex3700_firmware
before 1.0.0.100
NVD
netgear ex3800_firmware
netgear:ex3800_firmware
before 1.0.0.100
NVD
netgear ex6120_firmware
netgear:ex6120_firmware
before 1.0.0.72
NVD
netgear ex6130_firmware
netgear:ex6130_firmware
before 1.0.0.54
NVD
netgear mr60_firmware
netgear:mr60_firmware
before 1.1.7.132
NVD
netgear mr70_firmware
netgear:mr70_firmware
before 1.0.3.28
NVD
netgear mr80_firmware
netgear:mr80_firmware
before 1.1.7.14
NVD
netgear ms60_firmware
netgear:ms60_firmware
before 1.1.7.132
NVD
netgear ms70_firmware
netgear:ms70_firmware
before 1.0.3.28
NVD
netgear ms80_firmware
netgear:ms80_firmware
before 1.1.7.14
NVD
netgear r6400v2_firmware
netgear:r6400v2_firmware
before 1.0.4.128
NVD
netgear r6700v3_firmware
netgear:r6700v3_firmware
before 1.0.4.128
NVD
netgear r6900p_firmware
netgear:r6900p_firmware
before 1.3.3.152
NVD
netgear r7000_firmware
netgear:r7000_firmware
before 1.0.11.216
NVD
netgear r7000p_firmware
netgear:r7000p_firmware
before 1.3.3.152
NVD
netgear r7960p_firmware
netgear:r7960p_firmware
before 1.4.4.92
NVD
netgear r8000p_firmware
netgear:r8000p_firmware
before 1.4.4.92
NVD
netgear r8500_firmware
netgear:r8500_firmware
all versions
NVD
netgear rax20_firmware
netgear:rax20_firmware
before 1.0.18.144
NVD
netgear rax35v2_firmware
netgear:rax35v2_firmware
before 1.0.12.118
NVD
netgear rax40v2_firmware
netgear:rax40v2_firmware
before 1.0.12.118
NVD
netgear rax41_firmware
netgear:rax41_firmware
before 1.0.12.118
NVD
netgear rax42_firmware
netgear:rax42_firmware
before 1.0.12.118
NVD
netgear rax43_firmware
netgear:rax43_firmware
before 1.0.12.120
NVD
netgear rax48_firmware
netgear:rax48_firmware
before 1.0.12.118
NVD
netgear rax50_firmware
netgear:rax50_firmware
before 1.0.12.120
NVD
netgear rax50s_firmware
netgear:rax50s_firmware
before 1.0.12.120
NVD
netgear raxe450_firmware
netgear:raxe450_firmware
before 1.0.10.86
NVD
netgear raxe500_firmware
netgear:raxe500_firmware
before 1.0.10.86
NVD
netgear xr1000_firmware
netgear:xr1000_firmware
before 1.0.0.68
NVD
netgear rax45_firmware
netgear:rax45_firmware
before 1.0.12.118
NVD

References

  • vendor-advisory
  • product
  • product
  • product
  • product
  • product
  • product
  • product
  • product
  • product
  • product
  • product
  • product
  • product
  • product
  • product
  • product
  • product
  • product
  • product
  • product
  • product
  • product
  • product
  • product

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.