CVE-2026-9210
Severity CVSS v4.0:
MEDIUM
Type:
CWE-20
Input Validation
Publication date:
09/06/2026
Last modified:
23/07/2026
Description
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
Impact
Base Score 4.0
4.90
Severity 4.0
MEDIUM
Base Score 3.x
4.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:netgear:ex3700_firmware:*:*:*:*:*:*:*:* | 1.0.0.100 (excluding) | |
| cpe:2.3:h:netgear:ex3700:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:netgear:ex3800_firmware:*:*:*:*:*:*:*:* | 1.0.0.100 (excluding) | |
| cpe:2.3:h:netgear:ex3800:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:netgear:ex6120_firmware:*:*:*:*:*:*:*:* | 1.0.0.72 (excluding) | |
| cpe:2.3:h:netgear:ex6120:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:netgear:ex6130_firmware:*:*:*:*:*:*:*:* | 1.0.0.54 (excluding) | |
| cpe:2.3:h:netgear:ex6130:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:* | 1.1.7.132 (excluding) | |
| cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:netgear:mr70_firmware:*:*:*:*:*:*:*:* | 1.0.3.28 (excluding) | |
| cpe:2.3:h:netgear:mr70:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:netgear:mr80_firmware:*:*:*:*:*:*:*:* | 1.1.7.14 (excluding) | |
| cpe:2.3:h:netgear:mr80:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:* | 1.1.7.132 (excluding) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory
- https://www.netgear.com/support/product/ex3700/
- https://www.netgear.com/support/product/ex3800/
- https://www.netgear.com/support/product/ex6120/
- https://www.netgear.com/support/product/ex6130/
- https://www.netgear.com/support/product/mr60/
- https://www.netgear.com/support/product/mr70/
- https://www.netgear.com/support/product/mr80/
- https://www.netgear.com/support/product/ms60/
- https://www.netgear.com/support/product/ms70/
- https://www.netgear.com/support/product/ms80/
- https://www.netgear.com/support/product/r6400v2/
- https://www.netgear.com/support/product/r6700v3/
- https://www.netgear.com/support/product/r6900p/
- https://www.netgear.com/support/product/r7000/
- https://www.netgear.com/support/product/r7000p/
- https://www.netgear.com/support/product/r7960p/
- https://www.netgear.com/support/product/r8000p/
- https://www.netgear.com/support/product/r8500/
- https://www.netgear.com/support/product/rax20/
- https://www.netgear.com/support/product/rax35v2/
- https://www.netgear.com/support/product/rax40v2/
- https://www.netgear.com/support/product/rax41/
- https://www.netgear.com/support/product/rax42/
- https://www.netgear.com/support/product/rax43/
- https://www.netgear.com/support/product/rax45/
- https://www.netgear.com/support/product/rax48/
- https://www.netgear.com/support/product/rax50/
- https://www.netgear.com/support/product/rax50s/
- https://www.netgear.com/support/product/raxe450/
- https://www.netgear.com/support/product/raxe500/
- https://www.netgear.com/support/product/xr1000/



