CVE-2026-9212
Insufficient authentication and input validation in certain NETGEAR products
- Published
- Updated
- Reserved
- Assigned by
- NETGEAR
Description
Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NETGEARCNA (assigner) | 4.0 | Medium5.6 | CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/E:U |
| NVDNVD · Analyzed | 4.0 | Medium5.6 | CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
- EPSS (exploitation in 30 days)
- 0.27% · top 81% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.6.
Weakness
Affected products
- affected < V2.6.4.60
- affected < V2.7.6.8
- affected ≤ *
- affected < V1.0.4.96
- affected < V1.0.6.46
- affected < V1.0.5.50
- affected < V1.0.5.50
- affected < V1.2.10.56
- affected < V1.2.10.56
- affected < V1.2.10.56
- affected < V1.0.5.50
- affected < V1.0.19.172
- affected < V1.0.19.172
- affected < 2.7.5.6
- affected < 2.7.5.6
- affected < V4.4.2.1
- affected < 2.7.5.6
- affected < 2.7.5.6
- affected < 2.7.5.6
- affected < 2.7.5.6
- affected < V4.4.2.1
- affected < 2.7.5.6
- affected < 2.7.5.6
- affected < V2.3.3.136
- affected < v2.3.3.136
What to do
Solution: Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in: ProductFixed VersionLBR1020 (EoS) Orbi 4GX AC1200 Dual-Band Mesh WiFi Router V2.6.4.60 https://www.netgear.com/support/product/lbr1020/ LBR20 Orbi LTE Tri-band WiFi Router V2.7.6.8 https://www.netgear.com/support/product/lbr20/ R6700AX (EoS) 4-Stream AX1800 WiFi 6 RouterEOSR7800 (EoS) Nighthawk X4S AC2600 Smart WiFi Router V1.0.4.96 https://www.netgear.com/support/product/r7800/ R9000 (EoS) Nighthawk X10 AD7200 Smart WiFi Router V1.0.6.46 https://www.netgear.com/support/product/r9000/ RAX10 4-Stream AX1800 WiFi 6 Router V1.0.5.50 https://www.netgear.com/support/product/rax10/ RAX10v2V1.0.5.50RAX120 (EoS) Nighthawk AX12 12-Stream WiFi Router V1.2.10.56 https://www.netgear.com/support/product/rax120/ RAX120v1 (EoS)V1.2.10.56RAX120v2 Nighthawk AX12 12-Stream AX6000 WiFi Router V1.2.10.56 https://www.netgear.com/support/product/rax120v2/ RAX36S Nighthawk AX4 4-Stream AX3000 WiFi Router V1.0.5.50 https://www.netgear.com/support/product/rax36s/ RAX70 Nighthawk Tri-band AX8 8-Stream AX6600 WiFi 6 Router V1.0.19.172 https://www.netgear.com/support/product/rax70/ RAX78 Nighthawk AX8 8-Stream AX6200 Tri-Band WiFi Router V1.0.19.172 https://www.netgear.com/support/product/rax78/ RBR10 (EoS) Orbi AC1200 Dual-Band Mesh WiFi Router V2.7.5.6 https://www.netgear.com/support/product/rbr10 RBR20 (EoS) Orbi AC2200 Tri-band WiFi Router V2.7.5.6 https://www.netgear.com/support/product/rbr20 RBR350 Orbi AX1800 WiFi 6 Dual-band Mesh Router V4.4.2.1 https://www.netgear.com/support/product/rbr350/ RBR40 (EoS) Orbi AC2200 Tri-band WiFi Router V2.7.5.6 https://www.netgear.com/support/product/rbr40 RBR50 (EoS) Orbi AC3000 Tri-band WiFi Router V2.7.5.6 https://www.netgear.com/support/product/rbr50 RBS10 (EoS) Orbi AC1200 Dual-Band Mesh WiFi Add-on Satellite V2.7.5.6 https://www.netgear.com/support/product/rbs10 RBS20 (EoS) Orbi AC2200 Tri-band WiFi Add-on Satellite V2.7.5.6 https://www.netgear.com/support/product/rbs20 RBS350 Orbi AX1800 WiFi 6 Dual-band Mesh Add-on Satellite V4.4.2.1 https://www.netgear.com/support/product/rbs350/ RBS40 (EoS) Orbi AC2200 Tri-band WiFi Add-on Satellite V2.7.5.6 https://www.netgear.com/support/product/rbs40 RBS50 (EoS) Orbi AC3000 Tri-band WiFi Add-on Satellite V2.7.5.6 https://www.netgear.com/support/product/rbs50 XR450 (EoS) Nighthawk Pro Gaming Router V2.3.3.136 https://www.netgear.com/support/product/xr450/ XR500 (EoS) Nighthawk Pro Gaming Router v2.3.3.136 https://www.netgear.com/support/product/xr500/ Models marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.
References (24)
- https://www.netgear.com/support/product/lbr20/ (opens in a new tab)productpatch
- https://www.netgear.com/support/product/lbr1020/ (opens in a new tab)productpatch
- https://www.netgear.com/support/product/r6700ax/ (opens in a new tab)productpatch
- https://www.netgear.com/support/product/r9000/ (opens in a new tab)productpatch
- https://www.netgear.com/support/product/r7800/ (opens in a new tab)productpatch
- https://www.netgear.com/support/product/rax10/ (opens in a new tab)productpatch
- https://www.netgear.com/support/product/rax120/ (opens in a new tab)productpatch
- https://www.netgear.com/support/product/rax78/ (opens in a new tab)productpatch
- https://www.netgear.com/support/product/rax120v2/ (opens in a new tab)productpatch
- https://www.netgear.com/support/product/rax70/ (opens in a new tab)productpatch
- https://www.netgear.com/support/product/rbr10/ (opens in a new tab)productpatch
- https://www.netgear.com/support/product/rbr350/ (opens in a new tab)productpatch
- https://www.netgear.com/support/product/rbr40/ (opens in a new tab)productpatch
- https://www.netgear.com/support/product/rbr50/ (opens in a new tab)productpatch
- https://www.netgear.com/support/product/rbs10/ (opens in a new tab)productpatch
- https://www.netgear.com/support/product/rbs20/ (opens in a new tab)productpatch
- https://www.netgear.com/support/product/rax36s/ (opens in a new tab)productpatch
- https://www.netgear.com/support/product/rbr20/ (opens in a new tab)productpatch
- https://www.netgear.com/support/product/rbs50/ (opens in a new tab)productpatch
- https://www.netgear.com/support/product/rbs350/ (opens in a new tab)productpatch
- https://www.netgear.com/support/product/xr500/ (opens in a new tab)productpatch
- https://www.netgear.com/support/product/rbs40/ (opens in a new tab)productpatch
- https://www.netgear.com/support/product/xr450/ (opens in a new tab)productpatch
- https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory (opens in a new tab)vendor-advisory
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2026-9212)Record last updated .