{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-9212", "assignerOrgId": "a2826606-91e7-4eb6-899e-8484bd4575d5", "state": "PUBLISHED", "assignerShortName": "NETGEAR", "dateReserved": "2026-05-21T17:29:04.787Z", "datePublished": "2026-06-09T15:50:53.044Z", "dateUpdated": "2026-06-09T17:14:19.123Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "a2826606-91e7-4eb6-899e-8484bd4575d5", "shortName": "NETGEAR", "dateUpdated": "2026-06-09T15:50:53.044Z"}, "title": "Insufficient authentication and input validation in certain NETGEAR products", "datePublic": "2026-06-09T00:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-306", "description": "CWE-306 Missing authentication for critical function", "type": "CWE"}]}, {"descriptions": [{"lang": "en", "cweId": "CWE-20", "description": "CWE-20 Improper input validation", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-242", "descriptions": [{"lang": "en", "value": "CAPEC-242 Code Injection"}]}], "affected": [{"vendor": "NETGEAR", "product": "LBR1020", "versions": [{"status": "affected", "version": "0", "lessThan": "V2.6.4.60", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "LBR20", "versions": [{"status": "affected", "version": "0", "lessThan": "V2.7.6.8", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "R6700AX", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.0.20.174", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "R7800", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.4.96", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "R9000", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.6.46", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAX10", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.5.50", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAX10v2", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.5.50", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAX120", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.2.10.56", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAX120v1", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.2.10.56", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAX120v2", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.2.10.56", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAX36S", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.5.50", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAX70", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.19.172", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAX78", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.19.172", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBR10", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "2.7.6.6", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBR20", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "2.7.6.6", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBR350", "versions": [{"status": "affected", "version": "0", "lessThan": "V4.4.2.1", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBR40", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "2.7.6.6", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBR50", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "2.7.6.6", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBS10", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "2.7.6.6", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBS20", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "2.7.6.6", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBS350", "versions": [{"status": "affected", "version": "0", "lessThan": "V4.4.2.1", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBS40", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "2.7.6.6", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBS50", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "2.7.6.6", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "XR450", "versions": [{"status": "affected", "version": "0", "lessThan": "V2.3.3.136", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "XR500", "versions": [{"status": "affected", "version": "0", "lessThan": "v2.3.3.136", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Insufficient authentication and input validation in the\u00a0listed NETGEAR models allow users connected to the local network to execute commands impacting product's confidentiality or change certain configurations.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting product's confidentiality or change certain configurations. </p>"}]}], "references": [{"url": "https://www.netgear.com/support/product/lbr20/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/lbr1020/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/r6700ax/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/r9000/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/r7800/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rax10/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rax120/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rax78/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rax120v2/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rax70/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbr10/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbr350/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbr40/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbr50/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbs10/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbs20/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rax36s/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbr20/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbs50/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbs350/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/xr500/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbs40/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/xr450/", "tags": ["product", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "ADJACENT", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "LOW", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "NONE", "exploitMaturity": "UNREPORTED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 5.6, "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/E:U"}}], "solutions": [{"lang": "en", "value": "NETGEAR strongly recommends that you install the latest firmware as soon as possible.\n\n\n\nIssue fixed in:\n\nProductFixed VersionLBR1020* V2.6.4.60 https://www.netgear.com/support/product/lbr1020/ LBR20 V2.7.6.8 https://www.netgear.com/support/product/lbr20/ R6700AX*EOSR7800* V1.0.4.96 https://www.netgear.com/support/product/r7800/ R9000* V1.0.6.46 https://www.netgear.com/support/product/r9000/ RAX10 V1.0.5.50 https://www.netgear.com/support/product/rax10/ RAX10v2V1.0.5.50RAX120 V1.2.10.56 https://www.netgear.com/support/product/rax120/ RAX120v1*V1.2.10.56RAX120v2 V1.2.10.56 https://www.netgear.com/support/product/rax120v2/ RAX36S V1.0.5.50 https://www.netgear.com/support/product/rax36s/ RAX70 V1.0.19.172 https://www.netgear.com/support/product/rax70/ RAX78 V1.0.19.172 https://www.netgear.com/support/product/rax78/ RBR10*EOSRBR20*EOSRBR350 V4.4.2.1 https://www.netgear.com/support/product/rbr350/ RBR40*EOSRBR50*EOSRBS10*EOSRBS20*EOSRBS350 V4.4.2.1 https://www.netgear.com/support/product/rbs350/ RBS40*EOSRBS50*EOSXR450* V2.3.3.136 https://www.netgear.com/support/product/xr450/ XR500* v2.3.3.136 https://www.netgear.com/support/product/xr500/ \n\n* Model has reached its End-of-Support (EOS) phase and no future security updates are planned. NETGEAR strongly recommends\nthat you retire this device and upgrade to a newer NETGEAR product for\ncontinued security support.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>NETGEAR strongly recommends that you install the latest firmware as soon as possible.</p><p>Issue fixed in:</p><table><thead><tr><th>Product</th><th>Fixed Version</th></tr></thead><tbody><tr><td>LBR1020*</td><td><a href=\"https://www.netgear.com/support/product/lbr1020/\">V2.6.4.60</a></td></tr><tr><td>LBR20</td><td><a href=\"https://www.netgear.com/support/product/lbr20/\">V2.7.6.8</a></td></tr><tr><td>R6700AX*</td><td>EOS</td></tr><tr><td>R7800*</td><td><a href=\"https://www.netgear.com/support/product/r7800/\">V1.0.4.96</a></td></tr><tr><td>R9000*</td><td><a href=\"https://www.netgear.com/support/product/r9000/\">V1.0.6.46</a></td></tr><tr><td>RAX10</td><td><a href=\"https://www.netgear.com/support/product/rax10/\">V1.0.5.50</a></td></tr><tr><td>RAX10v2</td><td>V1.0.5.50</td></tr><tr><td>RAX120</td><td><a href=\"https://www.netgear.com/support/product/rax120/\">V1.2.10.56</a></td></tr><tr><td>RAX120v1*</td><td>V1.2.10.56</td></tr><tr><td>RAX120v2</td><td><a href=\"https://www.netgear.com/support/product/rax120v2/\">V1.2.10.56</a></td></tr><tr><td>RAX36S</td><td><a href=\"https://www.netgear.com/support/product/rax36s/\">V1.0.5.50</a></td></tr><tr><td>RAX70</td><td><a href=\"https://www.netgear.com/support/product/rax70/\">V1.0.19.172</a></td></tr><tr><td>RAX78</td><td><a href=\"https://www.netgear.com/support/product/rax78/\">V1.0.19.172</a></td></tr><tr><td>RBR10*</td><td>EOS</td></tr><tr><td>RBR20*</td><td>EOS</td></tr><tr><td>RBR350</td><td><a href=\"https://www.netgear.com/support/product/rbr350/\">V4.4.2.1</a></td></tr><tr><td>RBR40*</td><td>EOS</td></tr><tr><td>RBR50*</td><td>EOS</td></tr><tr><td>RBS10*</td><td>EOS</td></tr><tr><td>RBS20*</td><td>EOS</td></tr><tr><td>RBS350</td><td><a href=\"https://www.netgear.com/support/product/rbs350/\">V4.4.2.1</a></td></tr><tr><td>RBS40*</td><td>EOS</td></tr><tr><td>RBS50*</td><td>EOS</td></tr><tr><td>XR450*</td><td><a href=\"https://www.netgear.com/support/product/xr450/\">V2.3.3.136</a></td></tr><tr><td>XR500*</td><td><a href=\"https://www.netgear.com/support/product/xr500/\">v2.3.3.136</a></td></tr></tbody></table><p><span>* Model has reached its End-of-Support (EOS) phase and no future security updates are planned. NETGEAR strongly recommends\nthat you retire this device and upgrade to a newer NETGEAR product for\ncontinued security support.</span></p>"}]}], "credits": [{"lang": "en", "value": "ZeroZenx Labs", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.3"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-09T17:13:57.813784Z", "id": "CVE-2026-9212", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-09T17:14:19.123Z"}}]}}
MITRE
Vulnrichment
NVD
Redhat
OpenCVE Enrichment