{"id":"CVE-2026-9212","aliases":[],"cve":{"records":[{"id":"CVE-2026-9212","source":"NETGEAR","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-05-21T17:29:04.787Z","published":"2026-06-09T15:50:53.044Z","modified":"2026-11-04T17:34:33.879Z"}],"publishers":[{"name":"NETGEAR","role":"CNA","organizationId":"a2826606-91e7-4eb6-899e-8484bd4575d5","modified":"2026-11-04T17:34:33.879Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-06-10T13:32:49.023Z"}],"references":[{"url":"https://www.netgear.com/support/product/lbr20/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://www.netgear.com/support/product/lbr1020/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://www.netgear.com/support/product/r6700ax/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://www.netgear.com/support/product/r9000/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://www.netgear.com/support/product/r7800/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://www.netgear.com/support/product/rax10/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://www.netgear.com/support/product/rax120/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://www.netgear.com/support/product/rax78/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://www.netgear.com/support/product/rax120v2/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://www.netgear.com/support/product/rax70/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://www.netgear.com/support/product/rbr10/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://www.netgear.com/support/product/rbr350/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://www.netgear.com/support/product/rbr40/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://www.netgear.com/support/product/rbr50/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://www.netgear.com/support/product/rbs10/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://www.netgear.com/support/product/rbs20/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://www.netgear.com/support/product/rax36s/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://www.netgear.com/support/product/rbr20/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://www.netgear.com/support/product/rbs50/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://www.netgear.com/support/product/rbs350/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://www.netgear.com/support/product/xr500/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://www.netgear.com/support/product/rbs40/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://www.netgear.com/support/product/xr450/","tags":["product","patch"],"source":"NETGEAR"},{"url":"https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory","tags":["vendor-advisory"],"source":"NETGEAR"}],"weaknesses":[{"id":"CWE-306","description":"CWE-306 Missing authentication for critical function","source":"NETGEAR"},{"id":"CWE-20","description":"CWE-20 Improper input validation","source":"NETGEAR"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-06-10T03:59:30.458680Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Insufficient authentication and input validation in certain NETGEAR products","titleSource":"NETGEAR","descriptionSource":"NETGEAR","description":"Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.","score":5.6,"severity":"medium","published":"2026-06-09T15:50:53.044Z","modified":"2026-11-04T17:34:33.879Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"NETGEAR","name":"LBR1020","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"V2.6.4.60","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"LBR20","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"V2.7.6.8","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"R6700AX","platforms":[],"versions":[{"version":"0","status":"affected","lessThanOrEqual":"*","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"R7800","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"V1.0.4.96","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"R9000","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"V1.0.6.46","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"RAX10","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"V1.0.5.50","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"RAX10v2","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"V1.0.5.50","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"RAX120","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"V1.2.10.56","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"RAX120v1","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"V1.2.10.56","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"RAX120v2","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"V1.2.10.56","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"RAX36S","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"V1.0.5.50","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"RAX70","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"V1.0.19.172","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"RAX78","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"V1.0.19.172","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"RBR10","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"2.7.5.6","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"RBR20","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"2.7.5.6","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"RBR350","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"V4.4.2.1","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"RBR40","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"2.7.5.6","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"RBR50","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"2.7.5.6","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"RBS10","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"2.7.5.6","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"RBS20","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"2.7.5.6","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"RBS350","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"V4.4.2.1","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"RBS40","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"2.7.5.6","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"RBS50","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"2.7.5.6","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"XR450","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"V2.3.3.136","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"},{"vendor":"NETGEAR","name":"XR500","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"v2.3.3.136","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"}],"remediation":[{"text":"Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:\n\nProductFixed VersionLBR1020 (EoS) Orbi 4GX AC1200 Dual-Band Mesh WiFi Router V2.6.4.60 https://www.netgear.com/support/product/lbr1020/ LBR20 Orbi LTE Tri-band WiFi Router V2.7.6.8 https://www.netgear.com/support/product/lbr20/ R6700AX (EoS) 4-Stream AX1800 WiFi 6 RouterEOSR7800 (EoS) Nighthawk X4S AC2600 Smart WiFi Router V1.0.4.96 https://www.netgear.com/support/product/r7800/ R9000 (EoS) Nighthawk X10 AD7200 Smart WiFi Router V1.0.6.46 https://www.netgear.com/support/product/r9000/ RAX10 4-Stream AX1800 WiFi 6 Router V1.0.5.50 https://www.netgear.com/support/product/rax10/ RAX10v2V1.0.5.50RAX120 (EoS) Nighthawk AX12 12-Stream WiFi Router V1.2.10.56 https://www.netgear.com/support/product/rax120/ RAX120v1 (EoS)V1.2.10.56RAX120v2 Nighthawk AX12 12-Stream AX6000 WiFi Router V1.2.10.56 https://www.netgear.com/support/product/rax120v2/ RAX36S Nighthawk AX4 4-Stream AX3000 WiFi Router V1.0.5.50 https://www.netgear.com/support/product/rax36s/ RAX70 Nighthawk Tri-band AX8 8-Stream AX6600 WiFi 6 Router V1.0.19.172 https://www.netgear.com/support/product/rax70/ RAX78 Nighthawk AX8 8-Stream AX6200 Tri-Band WiFi Router V1.0.19.172 https://www.netgear.com/support/product/rax78/ RBR10 (EoS) Orbi AC1200 Dual-Band Mesh WiFi Router V2.7.5.6 https://www.netgear.com/support/product/rbr10 RBR20 (EoS) Orbi AC2200 Tri-band WiFi Router V2.7.5.6 https://www.netgear.com/support/product/rbr20 RBR350 Orbi AX1800 WiFi 6 Dual-band Mesh Router V4.4.2.1 https://www.netgear.com/support/product/rbr350/ RBR40 (EoS) Orbi AC2200 Tri-band WiFi Router V2.7.5.6 https://www.netgear.com/support/product/rbr40 RBR50 (EoS) Orbi AC3000 Tri-band WiFi Router V2.7.5.6 https://www.netgear.com/support/product/rbr50 RBS10 (EoS) Orbi AC1200 Dual-Band Mesh WiFi Add-on Satellite V2.7.5.6 https://www.netgear.com/support/product/rbs10 RBS20 (EoS) Orbi AC2200 Tri-band WiFi Add-on Satellite V2.7.5.6 https://www.netgear.com/support/product/rbs20 RBS350 Orbi AX1800 WiFi 6 Dual-band Mesh Add-on Satellite V4.4.2.1 https://www.netgear.com/support/product/rbs350/ RBS40 (EoS) Orbi AC2200 Tri-band WiFi Add-on Satellite V2.7.5.6 https://www.netgear.com/support/product/rbs40 RBS50 (EoS) Orbi AC3000 Tri-band WiFi Add-on Satellite V2.7.5.6 https://www.netgear.com/support/product/rbs50 XR450 (EoS) Nighthawk Pro Gaming Router V2.3.3.136 https://www.netgear.com/support/product/xr450/ XR500 (EoS) Nighthawk Pro Gaming Router v2.3.3.136 https://www.netgear.com/support/product/xr500/ \n\nModels marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.","source":"NETGEAR","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"}],"references":["https://www.netgear.com/support/product/lbr20/","https://www.netgear.com/support/product/lbr1020/","https://www.netgear.com/support/product/r6700ax/","https://www.netgear.com/support/product/r9000/","https://www.netgear.com/support/product/r7800/","https://www.netgear.com/support/product/rax10/","https://www.netgear.com/support/product/rax120/","https://www.netgear.com/support/product/rax78/","https://www.netgear.com/support/product/rax120v2/","https://www.netgear.com/support/product/rax70/","https://www.netgear.com/support/product/rbr10/","https://www.netgear.com/support/product/rbr350/","https://www.netgear.com/support/product/rbr40/","https://www.netgear.com/support/product/rbr50/","https://www.netgear.com/support/product/rbs10/","https://www.netgear.com/support/product/rbs20/","https://www.netgear.com/support/product/rax36s/","https://www.netgear.com/support/product/rbr20/","https://www.netgear.com/support/product/rbs50/","https://www.netgear.com/support/product/rbs350/","https://www.netgear.com/support/product/xr500/","https://www.netgear.com/support/product/rbs40/","https://www.netgear.com/support/product/xr450/","https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory"],"sources":[{"name":"CVE","id":"CVE-2026-9212","modified":"2026-11-04T17:34:33.879Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-9212"}],"assessments":[{"source":"NETGEAR","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/E:U","score":5.6}],"sourceAffected":[],"observedAt":"2026-11-04T18:10:29.462Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T00:10:33.488Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-04T18:10:32.316Z","attemptedAt":"2026-11-04T18:10:32.316Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-04T18:10:32.329Z","attemptedAt":"2026-11-04T18:10:32.329Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-04T18:10:31.155Z","attemptedAt":"2026-11-04T18:10:31.155Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-04T18:10:32.316Z","attemptedAt":"2026-11-04T18:10:32.316Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-35466","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-35466","modified":"Nov 4, 2026, 5:17:58 PM","score":5.6,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/E:U","checkedAt":"2026-11-04T18:10:31.155Z"},{"source":"NVD","id":"CVE-2026-9212","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-9212","modified":"2026-07-23T08:10:00.137","score":5.6,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-11-04T18:10:32.316Z"},{"source":"NVD","id":"CVE-2026-9212","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-9212","modified":"2026-07-23T08:10:00.137","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-11-04T18:10:32.316Z"},{"source":"FIRST EPSS","id":"CVE-2026-9212","url":"https://www.first.org/epss/","probability":0.0027,"percentile":0.19269,"date":"2026-11-04","checkedAt":"2026-11-04T18:10:32.316Z"},{"source":"GitHub Advisory Database","id":"GHSA-wq28-w638-7xcv","url":"https://github.com/advisories/GHSA-wq28-w638-7xcv","modified":"2026-06-18T15:32:59Z","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-11-04T18:10:32.329Z"}],"aiSummary":null}