CVE-2026-9210

Severity CVSS v4.0:
MEDIUM
Type:
CWE-20 Input Validation
Publication date:
09/06/2026
Last modified:
23/07/2026

Description

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:netgear:ex3700_firmware:*:*:*:*:*:*:*:* 1.0.0.100 (excluding)
cpe:2.3:h:netgear:ex3700:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ex3800_firmware:*:*:*:*:*:*:*:* 1.0.0.100 (excluding)
cpe:2.3:h:netgear:ex3800:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ex6120_firmware:*:*:*:*:*:*:*:* 1.0.0.72 (excluding)
cpe:2.3:h:netgear:ex6120:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ex6130_firmware:*:*:*:*:*:*:*:* 1.0.0.54 (excluding)
cpe:2.3:h:netgear:ex6130:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:* 1.1.7.132 (excluding)
cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:mr70_firmware:*:*:*:*:*:*:*:* 1.0.3.28 (excluding)
cpe:2.3:h:netgear:mr70:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:mr80_firmware:*:*:*:*:*:*:*:* 1.1.7.14 (excluding)
cpe:2.3:h:netgear:mr80:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:* 1.1.7.132 (excluding)


References to Advisories, Solutions, and Tools