CVE-2026-9210

EUVD-2026-35459
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.5 MEDIUM
ADJACENT_NETWORK
LOW
HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 12%
Affected Products (NVD)
VendorProductVersion
netgearex3700_firmware
𝑥
< 1.0.0.100
netgearex3800_firmware
𝑥
< 1.0.0.100
netgearex6120_firmware
𝑥
< 1.0.0.72
netgearex6130_firmware
𝑥
< 1.0.0.54
netgearmr60_firmware
𝑥
< 1.1.7.132
netgearmr70_firmware
𝑥
< 1.0.3.28
netgearmr80_firmware
𝑥
< 1.1.7.14
netgearms60_firmware
𝑥
< 1.1.7.132
netgearms70_firmware
𝑥
< 1.0.3.28
netgearms80_firmware
𝑥
< 1.1.7.14
netgearr6400v2_firmware
𝑥
< 1.0.4.128
netgearr6700v3_firmware
𝑥
< 1.0.4.128
netgearr6900p_firmware
𝑥
< 1.3.3.152
netgearr7000_firmware
𝑥
< 1.0.11.216
netgearr7000p_firmware
𝑥
< 1.3.3.152
netgearr7960p_firmware
𝑥
< 1.4.4.92
netgearr8000p_firmware
𝑥
< 1.4.4.92
netgearr8500_firmware
-
netgearrax20_firmware
𝑥
< 1.0.18.144
netgearrax35v2_firmware
𝑥
< 1.0.12.118
netgearrax40v2_firmware
𝑥
< 1.0.12.118
netgearrax41_firmware
𝑥
< 1.0.12.118
netgearrax42_firmware
𝑥
< 1.0.12.118
netgearrax43_firmware
𝑥
< 1.0.12.120
netgearrax48_firmware
𝑥
< 1.0.12.118
netgearrax50_firmware
𝑥
< 1.0.12.120
netgearrax50s_firmware
𝑥
< 1.0.12.120
netgearraxe450_firmware
𝑥
< 1.0.10.86
netgearraxe500_firmware
𝑥
< 1.0.10.86
netgearxr1000_firmware
𝑥
< 1.0.0.68
netgearrax45_firmware
𝑥
< 1.0.12.118
𝑥
= Vulnerable software versions
References