CVE-2026-9212
published 2026-06-09CVE-2026-9212: Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the…
PriorityP433medium5.6CVSS 4.0
AVAACLATNPRLUINVCHVILVANSCHSINSANEUCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUXRXVXREXUX
EPSS
0.27%
18.8th percentile
Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.
Affected
25 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| netgear | lbr1020 | < V2.6.4.60 | V2.6.4.60 |
| netgear | lbr20 | < V2.7.6.8 | V2.7.6.8 |
| netgear | r6700ax | <= * | — |
| netgear | r7800 | < V1.0.4.96 | V1.0.4.96 |
| netgear | r9000 | < V1.0.6.46 | V1.0.6.46 |
| netgear | rax10 | < V1.0.5.50 | V1.0.5.50 |
| netgear | rax10v2 | < V1.0.5.50 | V1.0.5.50 |
| netgear | rax120 | < V1.2.10.56 | V1.2.10.56 |
| netgear | rax120v1 | < V1.2.10.56 | V1.2.10.56 |
| netgear | rax120v2 | < V1.2.10.56 | V1.2.10.56 |
| netgear | rax36s | < V1.0.5.50 | V1.0.5.50 |
| netgear | rax70 | < V1.0.19.172 | V1.0.19.172 |
| netgear | rax78 | < V1.0.19.172 | V1.0.19.172 |
| netgear | rbr10 | <= 2.7.6.6 | — |
| netgear | rbr20 | <= 2.7.6.6 | — |
| netgear | rbr350 | < V4.4.2.1 | V4.4.2.1 |
| netgear | rbr40 | <= 2.7.6.6 | — |
| netgear | rbr50 | <= 2.7.6.6 | — |
| netgear | rbs10 | <= 2.7.6.6 | — |
| netgear | rbs20 | <= 2.7.6.6 | — |
| netgear | rbs350 | < V4.4.2.1 | V4.4.2.1 |
| netgear | rbs40 | <= 2.7.6.6 | — |
| netgear | rbs50 | <= 2.7.6.6 | — |
| netgear | xr450 | < V2.3.3.136 | V2.3.3.136 |
| netgear | xr500 | < v2.3.3.136 | v2.3.3.136 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Netgear XR500 prior 2.6.4.60 missing authentication
vuldb·2026-06-09·CVSS 5.6
CVE-2026-9212 [MEDIUM] Netgear XR500 prior 2.6.4.60 missing authentication
A vulnerability was found in Netgear LBR1020, LBR20, R6700AX, R7800, R9000, RAX10, RAX10v2, RAX120, RAX120v1, RAX120v2, RAX36S, RAX70, RAX78, RBR10, RBR20, RBR350, RBR40, RBR50, RBS10, RBS20, RBS350, RBS40, RBS50, XR450 and XR500. It has been classified as critical. This impacts an unknown function. The manipulation leads to missing authentication.
This vulnerability is listed as CVE-2026-9212. The attack must be carried out from within the local network. There is no available exploit.
Upgrading the affected component is recommended.
GHSA
Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting product's confidentiality or change certain confi
ghsa_unreviewed·2026-06-09
CVE-2026-9212 [MEDIUM] CWE-20 Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting product's confidentiality or change certain confi
Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting product's confidentiality or change certain configurations.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisoryhttps://www.netgear.com/support/product/lbr1020/https://www.netgear.com/support/product/lbr20/https://www.netgear.com/support/product/r6700ax/https://www.netgear.com/support/product/r7800/https://www.netgear.com/support/product/r9000/https://www.netgear.com/support/product/rax10/https://www.netgear.com/support/product/rax120/https://www.netgear.com/support/product/rax120v2/https://www.netgear.com/support/product/rax36s/https://www.netgear.com/support/product/rax70/https://www.netgear.com/support/product/rax78/https://www.netgear.com/support/product/rbr10/https://www.netgear.com/support/product/rbr20/https://www.netgear.com/support/product/rbr350/https://www.netgear.com/support/product/rbr40/https://www.netgear.com/support/product/rbr50/https://www.netgear.com/support/product/rbs10/https://www.netgear.com/support/product/rbs20/https://www.netgear.com/support/product/rbs350/https://www.netgear.com/support/product/rbs40/https://www.netgear.com/support/product/rbs50/https://www.netgear.com/support/product/xr450/https://www.netgear.com/support/product/xr500/
2026-06-09
Published