CVE-2026-9214
published 2026-08-11CVE-2026-9214: Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized…
PriorityP421medium4.5CVSS 3.1
AVAACLPRHUINSUCNIHAN
EPSS
0.23%
13.1th percentile
Insufficient input validation vulnerability in the NETGEAR R7000 models
allows authenticated administrators connected to the local network to
make unauthorized modification to router software and functionality.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| netgear | r7000 | — | — |
CVSS provenance
nvdv3.14.5MEDIUMCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
nvdv4.04.3MEDIUMCVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
NETGEAR R7000 1.0.12.216 input validation
vuldb·2026-09-13·CVSS 4.5
CVE-2026-9214 [MEDIUM] NETGEAR R7000 1.0.12.216 input validation
A vulnerability marked as problematic has been reported in NETGEAR R7000 1.0.12.216. The impacted element is an unknown function. The manipulation leads to improper input validation. This vulnerability only affects products that are no longer supported by the maintainer.
This vulnerability is referenced as CVE-2026-9214. Remote exploitation of the attack is possible. No exploit is available.
GHSA
Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to router software and fu
ghsa_unreviewed·2026-08-11
CVE-2026-9214 [MEDIUM] CWE-20 Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to router software and fu
Insufficient input validation vulnerability in the NETGEAR R7000 models
allows authenticated administrators connected to the local network to
make unauthorized modification to router software and functionality.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-11
Published