CVE-2026-9210: Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make…

PriorityP427medium4.9CVSS 4.0

AVAACLATNPRNUINVCNVIHVANSCNSINSANEUCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUXRXVDRELUAmber

EPSS

0.22%

12.0th percentile

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

Affected

31 ranges· showing 25

Vendor	Product	Version range	Fixed in
netgear	ex3700	< V1.0.0.100	V1.0.0.100
netgear	ex3800	< V1.0.0.100	V1.0.0.100
netgear	ex6120	< V1.0.0.72	V1.0.0.72
netgear	ex6130	< V1.0.0.54	V1.0.0.54
netgear	mr60	< V1.1.7.132	V1.1.7.132
netgear	mr70	< V1.0.3.28	V1.0.3.28
netgear	mr80	< V1.1.7.14	V1.1.7.14
netgear	ms60	< V1.1.7.132	V1.1.7.132
netgear	ms70	< V1.0.3.28	V1.0.3.28
netgear	ms80	< V1.1.7.14	V1.1.7.14
netgear	r6400v2	< V1.0.4.128	V1.0.4.128
netgear	r6700v3	< V1.0.4.128	V1.0.4.128
netgear	r6900p	< V1.3.3.152	V1.3.3.152
netgear	r7000	< V1.0.11.216	V1.0.11.216
netgear	r7000p	< V1.3.3.152	V1.3.3.152
netgear	r7960p	< V1.4.4.92	V1.4.4.92
netgear	r8000p	< V1.4.4.92	V1.4.4.92
netgear	r8500	<= 1.0.2.160	—
netgear	rax20	< V1.0.18.144	V1.0.18.144
netgear	rax35v2	< V1.0.12.118	V1.0.12.118
netgear	rax40v2	< V1.0.12.118	V1.0.12.118
netgear	rax41	< V1.0.12.118	V1.0.12.118
netgear	rax42	< V1.0.12.118	V1.0.12.118
netgear	rax43	< V1.0.12.120	V1.0.12.120
netgear	rax45	< V1.0.12.118	V1.0.12.118

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.