Read the docs
TI-2026-08095 Aliases CVE-2026-9210GHSA-rgvr-gjhw-96v7

Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router

Priority LOW 22CWE-20Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00216 12th percentileScored 2026-11-07
Fix Fixed EX3700 (NETGEAR): V1.0.0.100EX3800 (NETGEAR): V1.0.0.100+28 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
NETGEAREX3700before V1.0.0.100V1.0.0.100Patch availableCNA
NETGEAREX3800before V1.0.0.100V1.0.0.100Patch availableCNA
NETGEAREX6120before V1.0.0.72V1.0.0.72Patch availableCNA
NETGEAREX6130before V1.0.0.54V1.0.0.54Patch availableCNA
NETGEARMR60before V1.1.7.132V1.1.7.132Patch availableCNA
NETGEARMR70before V1.0.3.28V1.0.3.28Patch availableCNA
NETGEARMR80before V1.1.7.14V1.1.7.14Patch availableCNA
NETGEARMS60before V1.1.7.132V1.1.7.132Patch availableCNA
NETGEARMS70before V1.0.3.28V1.0.3.28Patch availableCNA
NETGEARMS80before V1.1.7.14V1.1.7.14Patch availableCNA
NETGEARR6400v2before V1.0.4.128V1.0.4.128Patch availableCNA
NETGEARR6700v3before V1.0.4.128V1.0.4.128Patch availableCNA
NETGEARR6900Pbefore V1.3.3.152V1.3.3.152Patch availableCNA
NETGEARR7000before V1.0.11.216V1.0.11.216Patch availableCNA
NETGEARR7000Pbefore V1.3.3.152V1.3.3.152Patch availableCNA
NETGEARR7960Pbefore V1.4.4.92V1.4.4.92Patch availableCNA
NETGEARR8000Pbefore V1.4.4.92V1.4.4.92Patch availableCNA
NETGEARR8500up to 1.0.2.160—No fix listedCNA
NETGEARRAX20before V1.0.18.144V1.0.18.144Patch availableCNA
NETGEARRAX35v2before V1.0.12.118V1.0.12.118Patch availableCNA
NETGEARRAX40v2before V1.0.12.118V1.0.12.118Patch availableCNA
NETGEARRAX41before V1.0.12.118V1.0.12.118Patch availableCNA
NETGEARRAX42before V1.0.12.118V1.0.12.118Patch availableCNA
NETGEARRAX43before V1.0.12.120V1.0.12.120Patch availableCNA
NETGEARRAX45before V1.0.12.118V1.0.12.118Patch availableCNA
NETGEARRAX48before V1.0.12.118V1.0.12.118Patch availableCNA
NETGEARRAX50before V1.0.12.120V1.0.12.120Patch availableCNA
NETGEARRAX50Sbefore V1.0.12.120V1.0.12.120Patch availableCNA
NETGEARRAXE450before V1.0.10.86V1.0.10.86Patch availableCNA
NETGEARRAXE500before V1.0.10.86V1.0.10.86Patch availableCNA
NETGEARXR1000before V1.0.0.68V1.0.0.68Patch availableCNA
  • EX3700 VendorNETGEAR Affected before V1.0.0.100 Fixed in V1.0.0.100 Patch available CNA
  • EX3800 VendorNETGEAR Affected before V1.0.0.100 Fixed in V1.0.0.100 Patch available CNA
  • EX6120 VendorNETGEAR Affected before V1.0.0.72 Fixed in V1.0.0.72 Patch available CNA
  • EX6130 VendorNETGEAR Affected before V1.0.0.54 Fixed in V1.0.0.54 Patch available CNA
  • MR60 VendorNETGEAR Affected before V1.1.7.132 Fixed in V1.1.7.132 Patch available CNA
  • MR70 VendorNETGEAR Affected before V1.0.3.28 Fixed in V1.0.3.28 Patch available CNA
  • MR80 VendorNETGEAR Affected before V1.1.7.14 Fixed in V1.1.7.14 Patch available CNA
  • MS60 VendorNETGEAR Affected before V1.1.7.132 Fixed in V1.1.7.132 Patch available CNA
  • MS70 VendorNETGEAR Affected before V1.0.3.28 Fixed in V1.0.3.28 Patch available CNA
  • MS80 VendorNETGEAR Affected before V1.1.7.14 Fixed in V1.1.7.14 Patch available CNA
  • R6400v2 VendorNETGEAR Affected before V1.0.4.128 Fixed in V1.0.4.128 Patch available CNA
  • R6700v3 VendorNETGEAR Affected before V1.0.4.128 Fixed in V1.0.4.128 Patch available CNA
  • R6900P VendorNETGEAR Affected before V1.3.3.152 Fixed in V1.3.3.152 Patch available CNA
  • R7000 VendorNETGEAR Affected before V1.0.11.216 Fixed in V1.0.11.216 Patch available CNA
  • R7000P VendorNETGEAR Affected before V1.3.3.152 Fixed in V1.3.3.152 Patch available CNA
  • R7960P VendorNETGEAR Affected before V1.4.4.92 Fixed in V1.4.4.92 Patch available CNA
  • R8000P VendorNETGEAR Affected before V1.4.4.92 Fixed in V1.4.4.92 Patch available CNA
  • R8500 VendorNETGEAR Affected up to 1.0.2.160 Fixed in — No fix listed CNA
  • RAX20 VendorNETGEAR Affected before V1.0.18.144 Fixed in V1.0.18.144 Patch available CNA
  • RAX35v2 VendorNETGEAR Affected before V1.0.12.118 Fixed in V1.0.12.118 Patch available CNA
  • RAX40v2 VendorNETGEAR Affected before V1.0.12.118 Fixed in V1.0.12.118 Patch available CNA
  • RAX41 VendorNETGEAR Affected before V1.0.12.118 Fixed in V1.0.12.118 Patch available CNA
  • RAX42 VendorNETGEAR Affected before V1.0.12.118 Fixed in V1.0.12.118 Patch available CNA
  • RAX43 VendorNETGEAR Affected before V1.0.12.120 Fixed in V1.0.12.120 Patch available CNA
  • RAX45 VendorNETGEAR Affected before V1.0.12.118 Fixed in V1.0.12.118 Patch available CNA
  • RAX48 VendorNETGEAR Affected before V1.0.12.118 Fixed in V1.0.12.118 Patch available CNA
  • RAX50 VendorNETGEAR Affected before V1.0.12.120 Fixed in V1.0.12.120 Patch available CNA
  • RAX50S VendorNETGEAR Affected before V1.0.12.120 Fixed in V1.0.12.120 Patch available CNA
  • RAXE450 VendorNETGEAR Affected before V1.0.10.86 Fixed in V1.0.10.86 Patch available CNA
  • RAXE500 VendorNETGEAR Affected before V1.0.10.86 Fixed in V1.0.10.86 Patch available CNA
  • XR1000 VendorNETGEAR Affected before V1.0.0.68 Fixed in V1.0.0.68 Patch available CNA

CPE configurations NVD · 62

CPEVersionsRoleVendor
cpe:2.3:o:netgear:ex3700_firmware:*:*:*:*:*:*:*:*before 1.0.0.100VulnerableNETGEAR
cpe:2.3:h:netgear:ex3700:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:ex3800_firmware:*:*:*:*:*:*:*:*before 1.0.0.100VulnerableNETGEAR
cpe:2.3:h:netgear:ex3800:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:ex6120_firmware:*:*:*:*:*:*:*:*before 1.0.0.72VulnerableNETGEAR
cpe:2.3:h:netgear:ex6120:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:ex6130_firmware:*:*:*:*:*:*:*:*before 1.0.0.54VulnerableNETGEAR
cpe:2.3:h:netgear:ex6130:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:*before 1.1.7.132VulnerableNETGEAR
cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
  • cpe:2.3:o:netgear:ex3700_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0.100 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:ex3700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:ex3800_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0.100 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:ex3800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:ex6120_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0.72 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:ex6120:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:ex6130_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0.54 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:ex6130:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:* Versions before 1.1.7.132 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
Show 52 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:netgear:mr70_firmware:*:*:*:*:*:*:*:*before 1.0.3.28VulnerableNETGEAR
cpe:2.3:h:netgear:mr70:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:mr80_firmware:*:*:*:*:*:*:*:*before 1.1.7.14VulnerableNETGEAR
cpe:2.3:h:netgear:mr80:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:*before 1.1.7.132VulnerableNETGEAR
cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:ms70_firmware:*:*:*:*:*:*:*:*before 1.0.3.28VulnerableNETGEAR
cpe:2.3:h:netgear:ms70:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:ms80_firmware:*:*:*:*:*:*:*:*before 1.1.7.14VulnerableNETGEAR
cpe:2.3:h:netgear:ms80:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:r6400v2_firmware:*:*:*:*:*:*:*:*before 1.0.4.128VulnerableNETGEAR
cpe:2.3:h:netgear:r6400v2:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:r6700v3_firmware:*:*:*:*:*:*:*:*before 1.0.4.128VulnerableNETGEAR
cpe:2.3:h:netgear:r6700v3:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*before 1.3.3.152VulnerableNETGEAR
cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*before 1.0.11.216VulnerableNETGEAR
cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*before 1.3.3.152VulnerableNETGEAR
cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:r7960p_firmware:*:*:*:*:*:*:*:*before 1.4.4.92VulnerableNETGEAR
cpe:2.3:h:netgear:r7960p:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:*before 1.4.4.92VulnerableNETGEAR
cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:r8500_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNETGEAR
cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:*before 1.0.18.144VulnerableNETGEAR
cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:rax35v2_firmware:*:*:*:*:*:*:*:*before 1.0.12.118VulnerableNETGEAR
cpe:2.3:h:netgear:rax35v2:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:rax40v2_firmware:*:*:*:*:*:*:*:*before 1.0.12.118VulnerableNETGEAR
cpe:2.3:h:netgear:rax40v2:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:rax41_firmware:*:*:*:*:*:*:*:*before 1.0.12.118VulnerableNETGEAR
cpe:2.3:h:netgear:rax41:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:rax42_firmware:*:*:*:*:*:*:*:*before 1.0.12.118VulnerableNETGEAR
cpe:2.3:h:netgear:rax42:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:*before 1.0.12.120VulnerableNETGEAR
cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:rax48_firmware:*:*:*:*:*:*:*:*before 1.0.12.118VulnerableNETGEAR
cpe:2.3:h:netgear:rax48:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:*before 1.0.12.120VulnerableNETGEAR
cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:rax50s_firmware:*:*:*:*:*:*:*:*before 1.0.12.120VulnerableNETGEAR
cpe:2.3:h:netgear:rax50s:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:raxe450_firmware:*:*:*:*:*:*:*:*before 1.0.10.86VulnerableNETGEAR
cpe:2.3:h:netgear:raxe450:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:raxe500_firmware:*:*:*:*:*:*:*:*before 1.0.10.86VulnerableNETGEAR
cpe:2.3:h:netgear:raxe500:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:xr1000_firmware:*:*:*:*:*:*:*:*before 1.0.0.68VulnerableNETGEAR
cpe:2.3:h:netgear:xr1000:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:*before 1.0.12.118VulnerableNETGEAR
cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:*not specified by NVDRunning onNETGEAR
  • cpe:2.3:o:netgear:mr70_firmware:*:*:*:*:*:*:*:* Versions before 1.0.3.28 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:mr70:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:mr80_firmware:*:*:*:*:*:*:*:* Versions before 1.1.7.14 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:mr80:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:* Versions before 1.1.7.132 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:ms70_firmware:*:*:*:*:*:*:*:* Versions before 1.0.3.28 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:ms70:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:ms80_firmware:*:*:*:*:*:*:*:* Versions before 1.1.7.14 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:ms80:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:r6400v2_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.128 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:r6400v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:r6700v3_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.128 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:r6700v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:* Versions before 1.3.3.152 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:* Versions before 1.0.11.216 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:* Versions before 1.3.3.152 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:r7960p_firmware:*:*:*:*:*:*:*:* Versions before 1.4.4.92 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:r7960p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:* Versions before 1.4.4.92 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:r8500_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:* Versions before 1.0.18.144 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:rax35v2_firmware:*:*:*:*:*:*:*:* Versions before 1.0.12.118 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:rax35v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:rax40v2_firmware:*:*:*:*:*:*:*:* Versions before 1.0.12.118 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:rax40v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:rax41_firmware:*:*:*:*:*:*:*:* Versions before 1.0.12.118 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:rax41:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:rax42_firmware:*:*:*:*:*:*:*:* Versions before 1.0.12.118 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:rax42:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:* Versions before 1.0.12.120 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:rax48_firmware:*:*:*:*:*:*:*:* Versions before 1.0.12.118 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:rax48:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:* Versions before 1.0.12.120 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:rax50s_firmware:*:*:*:*:*:*:*:* Versions before 1.0.12.120 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:rax50s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:raxe450_firmware:*:*:*:*:*:*:*:* Versions before 1.0.10.86 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:raxe450:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:raxe500_firmware:*:*:*:*:*:*:*:* Versions before 1.0.10.86 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:raxe500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:xr1000_firmware:*:*:*:*:*:*:*:* Versions before 1.0.0.68 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:xr1000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
  • cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:* Versions before 1.0.12.118 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR

Remediation

  • Fix · CNA EX3700 (NETGEAR) Fixed in V1.0.0.100
  • Fix · CNA EX3800 (NETGEAR) Fixed in V1.0.0.100
  • Fix · CNA EX6120 (NETGEAR) Fixed in V1.0.0.72
  • Fix · CNA EX6130 (NETGEAR) Fixed in V1.0.0.54
  • Fix · CNA MR60 (NETGEAR) Fixed in V1.1.7.132
  • Fix · CNA MR70 (NETGEAR) Fixed in V1.0.3.28
  • Fix · CNA MR80 (NETGEAR) Fixed in V1.1.7.14
  • Fix · CNA MS60 (NETGEAR) Fixed in V1.1.7.132
  • Fix · CNA MS70 (NETGEAR) Fixed in V1.0.3.28
  • Fix · CNA MS80 (NETGEAR) Fixed in V1.1.7.14
  • Fix · CNA R6400v2 (NETGEAR) Fixed in V1.0.4.128
  • Fix · CNA R6700v3 (NETGEAR) Fixed in V1.0.4.128
  • Fix · CNA R6900P (NETGEAR) Fixed in V1.3.3.152
  • Fix · CNA R7000 (NETGEAR) Fixed in V1.0.11.216
  • Fix · CNA R7000P (NETGEAR) Fixed in V1.3.3.152
  • Fix · CNA R7960P (NETGEAR) Fixed in V1.4.4.92
  • Fix · CNA R8000P (NETGEAR) Fixed in V1.4.4.92
  • Fix · CNA RAX20 (NETGEAR) Fixed in V1.0.18.144
  • Fix · CNA RAX35v2 (NETGEAR) Fixed in V1.0.12.118
  • Fix · CNA RAX40v2 (NETGEAR) Fixed in V1.0.12.118
  • Fix · CNA RAX41 (NETGEAR) Fixed in V1.0.12.118
  • Fix · CNA RAX42 (NETGEAR) Fixed in V1.0.12.118
  • Fix · CNA RAX43 (NETGEAR) Fixed in V1.0.12.120
  • Fix · CNA RAX45 (NETGEAR) Fixed in V1.0.12.118
  • Fix · CNA RAX48 (NETGEAR) Fixed in V1.0.12.118
  • Fix · CNA RAX50 (NETGEAR) Fixed in V1.0.12.120
  • Fix · CNA RAX50S (NETGEAR) Fixed in V1.0.12.120
  • Fix · CNA RAXE450 (NETGEAR) Fixed in V1.0.10.86
  • Fix · CNA RAXE500 (NETGEAR) Fixed in V1.0.10.86
  • Fix · CNA XR1000 (NETGEAR) Fixed in V1.0.0.68

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    NETGEAR EX6120, EX6130 and 27 more products — kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory

    6 records Highest priority Priority LOW 6 LOW

    Other records, highest priority first

    • TI-2026-08098 Insufficient input validation in certain NETGEAR routersPriority LOW 33
    • TI-2026-00280 Certain NETGEAR devices allow administrators to tamper with systemPriority LOW 20
    • TI-2026-00279 Insufficient input validation in certain NETGEAR routersPriority LOW 19
    Show all 6 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-9210
  2. 2026-10-03 Alias added: GHSA-rgvr-gjhw-96v7

References

Patch 30

Advisory 1

Other 1

  • TI-2025-05360 Netgear EX3700 mtd sub_41619C stack-based overflow CVSS 4.0HIGH 8.7
  • TI-2022-10624 Buffer overflow in NETGEAR R6700v3 CVSS 3.1HIGH 8.8
  • TI-2021-13978 Stack-based buffer overflow in NETGEAR R6400v2 CVSS 3.1HIGH 8.8
  • TI-2021-20708 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1CRITICAL 9.8
  • TI-2020-18240 Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. CVSS 3.1CRITICAL 9.8
  • TI-2018-15096 Certain NETGEAR devices are affected by a stack-based buffer overflow by an… CVSS 3.1CRITICAL 9.8
See all 42 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences