cbcvebase.
CVE-2026-9210
published 2026-06-09

CVE-2026-9210: Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make…

PriorityP423medium4.5CVSS 3.1
AVAACLPRHUINSUCNIHAN
EPSS
0.22%
11.9th percentile
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

Affected

61 ranges· showing 25
VendorProductVersion rangeFixed in
netgearex3700< V1.0.0.100V1.0.0.100
netgearex3700_firmware< 1.0.0.1001.0.0.100
netgearex3800< V1.0.0.100V1.0.0.100
netgearex3800_firmware< 1.0.0.1001.0.0.100
netgearex6120< V1.0.0.72V1.0.0.72
netgearex6120_firmware< 1.0.0.721.0.0.72
netgearex6130< V1.0.0.54V1.0.0.54
netgearex6130_firmware< 1.0.0.541.0.0.54
netgearmr60< V1.1.7.132V1.1.7.132
netgearmr60_firmware< 1.1.7.1321.1.7.132
netgearmr70< V1.0.3.28V1.0.3.28
netgearmr70_firmware< 1.0.3.281.0.3.28
netgearmr80< V1.1.7.14V1.1.7.14
netgearmr80_firmware< 1.1.7.141.1.7.14
netgearms60< V1.1.7.132V1.1.7.132
netgearms60_firmware< 1.1.7.1321.1.7.132
netgearms70< V1.0.3.28V1.0.3.28
netgearms70_firmware< 1.0.3.281.0.3.28
netgearms80< V1.1.7.14V1.1.7.14
netgearms80_firmware< 1.1.7.141.1.7.14
netgearr6400v2< V1.0.4.128V1.0.4.128
netgearr6400v2_firmware< 1.0.4.1281.0.4.128
netgearr6700v3< V1.0.4.128V1.0.4.128
netgearr6700v3_firmware< 1.0.4.1281.0.4.128
netgearr6900p< V1.3.3.152V1.3.3.152

CVSS provenance

nvdv3.14.5MEDIUMCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
nvdv4.04.9MEDIUMCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.