CVE-2026-9213

EUVD-2026-35455
A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamper with traffic between the router and the Internet, to execute code on the device.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.1 HIGH
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 32%
Affected Products (NVD)
VendorProductVersion
netgearmr70_firmware
𝑥
< 1.0.4.48
netgearms70_firmware
𝑥
< 1.0.4.48
netgearraxe500_firmware
𝑥
< 1.2.14.114
netgearxr1000_firmware
𝑥
< 1.0.2.86
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory
https://www.netgear.com/support/product/mr70/
https://www.netgear.com/support/product/ms70/
https://www.netgear.com/support/product/raxe500/
https://www.netgear.com/support/product/xr1000/