CVSS 4.0
5.6 mediumCVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/E:UCVE-2026-9212
Medium (5.6) in netgear. EPSS 0.3% chance of exploitation in the next 30 days.
Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.
Severity
CVSS 3.1
8.0 highCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 19% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-20, CWE-306
- Published
- Modified
- Record from
- the NVD, synced
Affected
- netgear:lbr1020_firmware
- netgear:lbr20_firmware
- netgear:r6700ax_firmware
- netgear:r7800_firmware
- netgear:r9000_firmware
- netgear:rax10_firmware
- netgear:rax120_firmware
- netgear:rax36s_firmware
- netgear:rax70_firmware
- netgear:rax78_firmware
- netgear:rbr10_firmware
- netgear:rbr20_firmware
- netgear:rbr350_firmware
- netgear:rbr40_firmware
- netgear:rbr50_firmware
- netgear:rbs10_firmware
- netgear:rbs20_firmware
- netgear:rbs350_firmware
- netgear:rbs40_firmware
- netgear:rbs50_firmware
- netgear:xr450_firmware
- netgear:xr500_firmware