CVE-2026-9210

MEDIUM

Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router

Title source: cna
STIX 2.1

Description

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

References (32)

Core 32
Core References

Scores

CVSS v4 4.9
EPSS 0.0025
EPSS Percentile 16.0%
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-20
Status published
Products (32)
NETGEAR/EX3700 < V1.0.0.100
NETGEAR/EX3800 < V1.0.0.100
NETGEAR/EX6120 < V1.0.0.72
NETGEAR/EX6130 < V1.0.0.54
NETGEAR/MR60 < V1.1.7.132
NETGEAR/MR70 < V1.0.3.28
NETGEAR/MR80 < V1.1.7.14
NETGEAR/MS60 < V1.1.7.132
NETGEAR/MS70 < V1.0.3.28
NETGEAR/MS80 < V1.1.7.14
... and 22 more
Published Jun 09, 2026
Tracked Since Jun 09, 2026