Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting product's confidentiality or change certain configurations.

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact High

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
NETGEAR LBR1020 unaffected
Version Status Constraints
0 affected < V2.6.4.60
NETGEAR LBR20 unaffected
Version Status Constraints
0 affected < V2.7.6.8
NETGEAR R6700AX unaffected
Version Status Constraints
0 affected ≤ 1.0.20.174
NETGEAR R7800 unaffected
Version Status Constraints
0 affected < V1.0.4.96
NETGEAR R9000 unaffected
Version Status Constraints
0 affected < V1.0.6.46
NETGEAR RAX10 unaffected
Version Status Constraints
0 affected < V1.0.5.50
NETGEAR RAX10v2 unaffected
Version Status Constraints
0 affected < V1.0.5.50
NETGEAR RAX120 unaffected
Version Status Constraints
0 affected < V1.2.10.56
NETGEAR RAX120v1 unaffected
Version Status Constraints
0 affected < V1.2.10.56
NETGEAR RAX120v2 unaffected
Version Status Constraints
0 affected < V1.2.10.56
NETGEAR RAX36S unaffected
Version Status Constraints
0 affected < V1.0.5.50
NETGEAR RAX70 unaffected
Version Status Constraints
0 affected < V1.0.19.172
NETGEAR RAX78 unaffected
Version Status Constraints
0 affected < V1.0.19.172
NETGEAR RBR10 unaffected
Version Status Constraints
0 affected ≤ 2.7.6.6
NETGEAR RBR20 unaffected
Version Status Constraints
0 affected ≤ 2.7.6.6
NETGEAR RBR350 unaffected
Version Status Constraints
0 affected < V4.4.2.1
NETGEAR RBR40 unaffected
Version Status Constraints
0 affected ≤ 2.7.6.6
NETGEAR RBR50 unaffected
Version Status Constraints
0 affected ≤ 2.7.6.6
NETGEAR RBS10 unaffected
Version Status Constraints
0 affected ≤ 2.7.6.6
NETGEAR RBS20 unaffected
Version Status Constraints
0 affected ≤ 2.7.6.6
NETGEAR RBS350 unaffected
Version Status Constraints
0 affected < V4.4.2.1
NETGEAR RBS40 unaffected
Version Status Constraints
0 affected ≤ 2.7.6.6
NETGEAR RBS50 unaffected
Version Status Constraints
0 affected ≤ 2.7.6.6
NETGEAR XR450 unaffected
Version Status Constraints
0 affected < V2.3.3.136
NETGEAR XR500 unaffected
Version Status Constraints
0 affected < v2.3.3.136

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

No data.

Advisories

No advisories yet.

Fixes

Solution

NETGEAR strongly recommends that you install the latest firmware as soon as possible. Issue fixed in: ProductFixed VersionLBR1020* V2.6.4.60 https://www.netgear.com/support/product/lbr1020/ LBR20 V2.7.6.8 https://www.netgear.com/support/product/lbr20/ R6700AX*EOSR7800* V1.0.4.96 https://www.netgear.com/support/product/r7800/ R9000* V1.0.6.46 https://www.netgear.com/support/product/r9000/ RAX10 V1.0.5.50 https://www.netgear.com/support/product/rax10/ RAX10v2V1.0.5.50RAX120 V1.2.10.56 https://www.netgear.com/support/product/rax120/ RAX120v1*V1.2.10.56RAX120v2 V1.2.10.56 https://www.netgear.com/support/product/rax120v2/ RAX36S V1.0.5.50 https://www.netgear.com/support/product/rax36s/ RAX70 V1.0.19.172 https://www.netgear.com/support/product/rax70/ RAX78 V1.0.19.172 https://www.netgear.com/support/product/rax78/ RBR10*EOSRBR20*EOSRBR350 V4.4.2.1 https://www.netgear.com/support/product/rbr350/ RBR40*EOSRBR50*EOSRBS10*EOSRBS20*EOSRBS350 V4.4.2.1 https://www.netgear.com/support/product/rbs350/ RBS40*EOSRBS50*EOSXR450* V2.3.3.136 https://www.netgear.com/support/product/xr450/ XR500* v2.3.3.136 https://www.netgear.com/support/product/xr500/ * Model has reached its End-of-Support (EOS) phase and no future security updates are planned. NETGEAR strongly recommends that you retire this device and upgrade to a newer NETGEAR product for continued security support.

Workaround

No workaround given by the vendor.

References
Link Providers
https://www.netgear.com/support/product/lbr1020/ cve-icon cve-icon
https://www.netgear.com/support/product/lbr20/ cve-icon cve-icon
https://www.netgear.com/support/product/r6700ax/ cve-icon cve-icon
https://www.netgear.com/support/product/r7800/ cve-icon cve-icon
https://www.netgear.com/support/product/r9000/ cve-icon cve-icon
https://www.netgear.com/support/product/rax10/ cve-icon cve-icon
https://www.netgear.com/support/product/rax120/ cve-icon cve-icon
https://www.netgear.com/support/product/rax120v2/ cve-icon cve-icon
https://www.netgear.com/support/product/rax36s/ cve-icon cve-icon
https://www.netgear.com/support/product/rax70/ cve-icon cve-icon
https://www.netgear.com/support/product/rax78/ cve-icon cve-icon
https://www.netgear.com/support/product/rbr10/ cve-icon cve-icon
https://www.netgear.com/support/product/rbr20/ cve-icon cve-icon
https://www.netgear.com/support/product/rbr350/ cve-icon cve-icon
https://www.netgear.com/support/product/rbr40/ cve-icon cve-icon
https://www.netgear.com/support/product/rbr50/ cve-icon cve-icon
https://www.netgear.com/support/product/rbs10/ cve-icon cve-icon
https://www.netgear.com/support/product/rbs20/ cve-icon cve-icon
https://www.netgear.com/support/product/rbs350/ cve-icon cve-icon
https://www.netgear.com/support/product/rbs40/ cve-icon cve-icon
https://www.netgear.com/support/product/rbs50/ cve-icon cve-icon
https://www.netgear.com/support/product/xr450/ cve-icon cve-icon
https://www.netgear.com/support/product/xr500/ cve-icon cve-icon
History

Tue, 09 Jun 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 09 Jun 2026 16:30:00 +0000

Type Values Removed Values Added
Description Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting product's confidentiality or change certain configurations.
Title Insufficient authentication and input validation in certain NETGEAR products
Weaknesses CWE-20
CWE-306
References
Metrics cvssV4_0

{'score': 5.6, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/E:U'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: NETGEAR

Published:

Updated: 2026-06-09T17:14:19.123Z

Reserved: 2026-05-21T17:29:04.787Z

Link: CVE-2026-9212

cve-icon Vulnrichment

Updated: 2026-06-09T17:14:10.889Z

cve-icon NVD

Status : Received

Published: 2026-06-09T17:17:51.517

Modified: 2026-06-09T17:17:51.517

Link: CVE-2026-9212

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-09T17:45:10Z

Weaknesses