{ "dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": { "cveId": "CVE-2026-9212", "assignerOrgId": "a2826606-91e7-4eb6-899e-8484bd4575d5", "state": "PUBLISHED", "assignerShortName": "NETGEAR", "dateReserved": "2026-05-21T17:29:04.787Z", "datePublished": "2026-06-09T15:50:53.044Z", "dateUpdated": "2026-06-11T05:03:05.236Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "a2826606-91e7-4eb6-899e-8484bd4575d5", "shortName": "NETGEAR", "dateUpdated": "2026-06-11T05:03:05.236Z" }, "title": "Insufficient authentication and input validation in certain NETGEAR products", "datePublic": "2026-06-09T00:00:00.000Z", "problemTypes": [ { "descriptions": [ { "lang": "en", "cweId": "CWE-306", "description": "CWE-306 Missing authentication for critical function", "type": "CWE" } ] }, { "descriptions": [ { "lang": "en", "cweId": "CWE-20", "description": "CWE-20 Improper input validation", "type": "CWE" } ] } ], "impacts": [ { "capecId": "CAPEC-242", "descriptions": [ { "lang": "en", "value": "CAPEC-242 Code Injection" } ] } ], "affected": [ { "vendor": "NETGEAR", "product": "LBR1020", "versions": [ { "status": "affected", "version": "0", "lessThan": "V2.6.4.60", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "LBR20", "versions": [ { "status": "affected", "version": "0", "lessThan": "V2.7.6.8", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "R6700AX", "versions": [ { "status": "affected", "version": "0", "lessThanOrEqual": "*", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "R7800", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.4.96", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "R9000", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.6.46", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX10", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.5.50", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX10v2", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.5.50", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX120", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.2.10.56", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX120v1", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.2.10.56", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX120v2", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.2.10.56", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX36S", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.5.50", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX70", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.19.172", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX78", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.19.172", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RBR10", "versions": [ { "status": "affected", "version": "0", "lessThanOrEqual": "2.7.6.6", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RBR20", "versions": [ { "status": "affected", "version": "0", "lessThanOrEqual": "2.7.6.6", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RBR350", "versions": [ { "status": "affected", "version": "0", "lessThan": "V4.4.2.1", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RBR40", "versions": [ { "status": "affected", "version": "0", "lessThanOrEqual": "2.7.6.6", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RBR50", "versions": [ { "status": "affected", "version": "0", "lessThanOrEqual": "2.7.6.6", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RBS10", "versions": [ { "status": "affected", "version": "0", "lessThanOrEqual": "2.7.6.6", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RBS20", "versions": [ { "status": "affected", "version": "0", "lessThanOrEqual": "2.7.6.6", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RBS350", "versions": [ { "status": "affected", "version": "0", "lessThan": "V4.4.2.1", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RBS40", "versions": [ { "status": "affected", "version": "0", "lessThanOrEqual": "2.7.6.6", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RBS50", "versions": [ { "status": "affected", "version": "0", "lessThanOrEqual": "2.7.6.6", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "XR450", "versions": [ { "status": "affected", "version": "0", "lessThan": "V2.3.3.136", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "XR500", "versions": [ { "status": "affected", "version": "0", "lessThan": "v2.3.3.136", "versionType": "custom" } ], "defaultStatus": "unaffected" } ], "descriptions": [ { "lang": "en", "value": "Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "

Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations. 

" } ] } ], "references": [ { "url": "https://www.netgear.com/support/product/lbr20/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/lbr1020/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/r6700ax/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/r9000/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/r7800/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax10/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax120/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax78/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax120v2/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax70/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rbr10/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rbr350/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rbr40/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rbr50/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rbs10/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rbs20/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax36s/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rbr20/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rbs50/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rbs350/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/xr500/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rbs40/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/xr450/", "tags": [ "product", "patch" ] }, { "url": "https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory", "tags": [ "vendor-advisory" ] } ], "metrics": [ { "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ], "cvssV4_0": { "attackVector": "ADJACENT", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "LOW", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "NONE", "exploitMaturity": "UNREPORTED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 5.6, "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/E:U" } } ], "solutions": [ { "lang": "en", "value": "Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:\n\nProductFixed VersionLBR1020 (EoS) Orbi 4GX AC1200 Dual-Band Mesh WiFi Router V2.6.4.60 https://www.netgear.com/support/product/lbr1020/ LBR20 Orbi LTE Tri-band WiFi Router V2.7.6.8 https://www.netgear.com/support/product/lbr20/ R6700AX (EoS) 4-Stream AX1800 WiFi 6 RouterEOSR7800 (EoS) Nighthawk X4S AC2600 Smart WiFi Router V1.0.4.96 https://www.netgear.com/support/product/r7800/ R9000 (EoS) Nighthawk X10 AD7200 Smart WiFi Router V1.0.6.46 https://www.netgear.com/support/product/r9000/ RAX10 4-Stream AX1800 WiFi 6 Router V1.0.5.50 https://www.netgear.com/support/product/rax10/ RAX10v2V1.0.5.50RAX120 (EoS) Nighthawk AX12 12-Stream WiFi Router V1.2.10.56 https://www.netgear.com/support/product/rax120/ RAX120v1 (EoS)V1.2.10.56RAX120v2 Nighthawk AX12 12-Stream AX6000 WiFi Router V1.2.10.56 https://www.netgear.com/support/product/rax120v2/ RAX36S Nighthawk AX4 4-Stream AX3000 WiFi Router V1.0.5.50 https://www.netgear.com/support/product/rax36s/ RAX70 Nighthawk Tri-band AX8 8-Stream AX6600 WiFi 6 Router V1.0.19.172 https://www.netgear.com/support/product/rax70/ RAX78 Nighthawk AX8 8-Stream AX6200 Tri-Band WiFi Router V1.0.19.172 https://www.netgear.com/support/product/rax78/ RBR10 (EoS) Orbi AC1200 Dual-Band Mesh WiFi RouterEOSRBR20 (EoS) Orbi AC2200 Tri-band WiFi RouterEOSRBR350 Orbi AX1800 WiFi 6 Dual-band Mesh Router V4.4.2.1 https://www.netgear.com/support/product/rbr350/ RBR40 (EoS) Orbi AC2200 Tri-band WiFi RouterEOSRBR50 (EoS) Orbi AC3000 Tri-band WiFi RouterEOSRBS10 (EoS) Orbi AC1200 Dual-Band Mesh WiFi Add-on SatelliteEOSRBS20 (EoS) Orbi AC2200 Tri-band WiFi Add-on SatelliteEOSRBS350 Orbi AX1800 WiFi 6 Dual-band Mesh Add-on Satellite V4.4.2.1 https://www.netgear.com/support/product/rbs350/ RBS40 (EoS) Orbi AC2200 Tri-band WiFi Add-on SatelliteEOSRBS50 (EoS) Orbi AC3000 Tri-band WiFi Add-on SatelliteEOSXR450 (EoS) Nighthawk Pro Gaming Router V2.3.3.136 https://www.netgear.com/support/product/xr450/ XR500 (EoS) Nighthawk Pro Gaming Router v2.3.3.136 https://www.netgear.com/support/product/xr500/ \n\nModels marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "

Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:

ProductFixed Version
LBR1020 (EoS) Orbi 4GX AC1200 Dual-Band Mesh WiFi RouterV2.6.4.60
LBR20 Orbi LTE Tri-band WiFi RouterV2.7.6.8
R6700AX (EoS) 4-Stream AX1800 WiFi 6 RouterEOS
R7800 (EoS) Nighthawk X4S AC2600 Smart WiFi RouterV1.0.4.96
R9000 (EoS) Nighthawk X10 AD7200 Smart WiFi RouterV1.0.6.46
RAX10 4-Stream AX1800 WiFi 6 RouterV1.0.5.50
RAX10v2V1.0.5.50
RAX120 (EoS) Nighthawk AX12 12-Stream WiFi RouterV1.2.10.56
RAX120v1 (EoS)V1.2.10.56
RAX120v2 Nighthawk AX12 12-Stream AX6000 WiFi RouterV1.2.10.56
RAX36S Nighthawk AX4 4-Stream AX3000 WiFi RouterV1.0.5.50
RAX70 Nighthawk Tri-band AX8 8-Stream AX6600 WiFi 6 RouterV1.0.19.172
RAX78 Nighthawk AX8 8-Stream AX6200 Tri-Band WiFi RouterV1.0.19.172
RBR10 (EoS) Orbi AC1200 Dual-Band Mesh WiFi RouterEOS
RBR20 (EoS) Orbi AC2200 Tri-band WiFi RouterEOS
RBR350 Orbi AX1800 WiFi 6 Dual-band Mesh RouterV4.4.2.1
RBR40 (EoS) Orbi AC2200 Tri-band WiFi RouterEOS
RBR50 (EoS) Orbi AC3000 Tri-band WiFi RouterEOS
RBS10 (EoS) Orbi AC1200 Dual-Band Mesh WiFi Add-on SatelliteEOS
RBS20 (EoS) Orbi AC2200 Tri-band WiFi Add-on SatelliteEOS
RBS350 Orbi AX1800 WiFi 6 Dual-band Mesh Add-on SatelliteV4.4.2.1
RBS40 (EoS) Orbi AC2200 Tri-band WiFi Add-on SatelliteEOS
RBS50 (EoS) Orbi AC3000 Tri-band WiFi Add-on SatelliteEOS
XR450 (EoS) Nighthawk Pro Gaming RouterV2.3.3.136
XR500 (EoS) Nighthawk Pro Gaming Routerv2.3.3.136

Models marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.

" } ] } ], "credits": [ { "lang": "en", "value": "ZeroZenx Labs", "type": "finder" } ], "source": { "discovery": "EXTERNAL" }, "x_generator": { "engine": "Vulnogram 1.0.3" } }, "adp": [ { "metrics": [ { "other": { "type": "ssvc", "content": { "timestamp": "2026-06-10T03:59:30.458680Z", "id": "CVE-2026-9212", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "total" } ], "role": "CISA Coordinator", "version": "2.0.3" } } } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-10T13:32:49.023Z" } } ] } }