CVE-2026-9212

Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:netgear:lbr1020_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:lbr1020:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:netgear:lbr20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:lbr20:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:netgear:r6700ax_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6700ax:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:netgear:rax10_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax10:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:netgear:rax120_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:netgear:rax120:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax120:1.0:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax120:2.0:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:netgear:rax36s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax36s:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:netgear:rax70_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax70:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:netgear:rax78_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax78:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:netgear:rbr10_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr10:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:netgear:rbr20_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr20:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:netgear:rbr350_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr350:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:netgear:rbr40_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr40:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:netgear:rbr50_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr50:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:netgear:rbs10_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs10:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:netgear:rbs20_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs20:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:netgear:rbs350_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs350:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:netgear:rbs40_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs40:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:netgear:rbs50_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs50:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:netgear:xr450_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:xr450:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:netgear:xr500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:xr500:-:*:*:*:*:*:*:*

History

23 Jul 2026, 08:10

Type Values Removed Values Added
Summary
  • (es) Autenticación y validación de entrada insuficientes en los modelos NETGEAR listados; permiten a los usuarios conectados a la red local ejecutar comandos que afectan a la confidencialidad del producto o cambiar ciertas configuraciones.

18 Jun 2026, 15:25

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.0
CPE cpe:2.3:h:netgear:rax70:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs40:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbr350_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax36s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax120:2.0:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax120:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbr40_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr20:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbs350_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:xr450:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax120_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbr20_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax36s:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbr50_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr50:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs350:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbs10_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbs40_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:lbr20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:xr500:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:lbr20:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax78_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6700ax:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbs50_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r6700ax_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax70_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbs20_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax78:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax120:1.0:*:*:*:*:*:*:*
cpe:2.3:o:netgear:xr450_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax10:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr10:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs10:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs20:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:xr500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr350:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax10_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr40:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbr10_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:lbr1020_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:lbr1020:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs50:-:*:*:*:*:*:*:*
References () https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory - () https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory - Patch, Vendor Advisory
References () https://www.netgear.com/support/product/lbr1020/ - () https://www.netgear.com/support/product/lbr1020/ - Product
References () https://www.netgear.com/support/product/lbr20/ - () https://www.netgear.com/support/product/lbr20/ - Product
References () https://www.netgear.com/support/product/r6700ax/ - () https://www.netgear.com/support/product/r6700ax/ - Product
References () https://www.netgear.com/support/product/r7800/ - () https://www.netgear.com/support/product/r7800/ - Product
References () https://www.netgear.com/support/product/r9000/ - () https://www.netgear.com/support/product/r9000/ - Product
References () https://www.netgear.com/support/product/rax10/ - () https://www.netgear.com/support/product/rax10/ - Product
References () https://www.netgear.com/support/product/rax120/ - () https://www.netgear.com/support/product/rax120/ - Product
References () https://www.netgear.com/support/product/rax120v2/ - () https://www.netgear.com/support/product/rax120v2/ - Product
References () https://www.netgear.com/support/product/rax36s/ - () https://www.netgear.com/support/product/rax36s/ - Product
References () https://www.netgear.com/support/product/rax70/ - () https://www.netgear.com/support/product/rax70/ - Product
References () https://www.netgear.com/support/product/rax78/ - () https://www.netgear.com/support/product/rax78/ - Product
References () https://www.netgear.com/support/product/rbr10/ - () https://www.netgear.com/support/product/rbr10/ - Product
References () https://www.netgear.com/support/product/rbr20/ - () https://www.netgear.com/support/product/rbr20/ - Product
References () https://www.netgear.com/support/product/rbr350/ - () https://www.netgear.com/support/product/rbr350/ - Product
References () https://www.netgear.com/support/product/rbr40/ - () https://www.netgear.com/support/product/rbr40/ - Product
References () https://www.netgear.com/support/product/rbr50/ - () https://www.netgear.com/support/product/rbr50/ - Product
References () https://www.netgear.com/support/product/rbs10/ - () https://www.netgear.com/support/product/rbs10/ - Product
References () https://www.netgear.com/support/product/rbs20/ - () https://www.netgear.com/support/product/rbs20/ - Product
References () https://www.netgear.com/support/product/rbs350/ - () https://www.netgear.com/support/product/rbs350/ - Product
References () https://www.netgear.com/support/product/rbs40/ - () https://www.netgear.com/support/product/rbs40/ - Product
References () https://www.netgear.com/support/product/rbs50/ - () https://www.netgear.com/support/product/rbs50/ - Product
References () https://www.netgear.com/support/product/xr450/ - () https://www.netgear.com/support/product/xr450/ - Product
References () https://www.netgear.com/support/product/xr500/ - () https://www.netgear.com/support/product/xr500/ - Product
First Time Netgear r7800
Netgear rbr50
Netgear rax120
Netgear rbs20 Firmware
Netgear rax78
Netgear rbs20
Netgear rax10 Firmware
Netgear r7800 Firmware
Netgear xr500 Firmware
Netgear rbs40
Netgear xr500
Netgear rbr10
Netgear rbr50 Firmware
Netgear rax10
Netgear r6700ax Firmware
Netgear rbs40 Firmware
Netgear r9000
Netgear rbs350 Firmware
Netgear rbr20 Firmware
Netgear
Netgear r6700ax
Netgear xr450
Netgear rbs10
Netgear rax78 Firmware
Netgear xr450 Firmware
Netgear rax36s
Netgear rbr350
Netgear rbr20
Netgear r9000 Firmware
Netgear rax70
Netgear lbr20
Netgear rbs50 Firmware
Netgear rax36s Firmware
Netgear lbr1020
Netgear rbs10 Firmware
Netgear rbr40 Firmware
Netgear rbr40
Netgear rax70 Firmware
Netgear rbr350 Firmware
Netgear rbs50
Netgear lbr1020 Firmware
Netgear lbr20 Firmware
Netgear rbs350
Netgear rbr10 Firmware
Netgear rax120 Firmware

11 Jun 2026, 05:16

Type Values Removed Values Added
Summary (en) Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting product's confidentiality or change certain configurations. (en) Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.

10 Jun 2026, 16:17

Type Values Removed Values Added
References
  • () https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory -

09 Jun 2026, 17:17

Type Values Removed Values Added
New CVE

Information

Published : 2026-06-09 17:17

Updated : 2026-07-23 08:10


NVD link : CVE-2026-9212

Mitre link : CVE-2026-9212

CVE.ORG link : CVE-2026-9212


JSON object : View

Products Affected

netgear

  • r9000_firmware
  • rax10
  • lbr20_firmware
  • rax36s
  • rax78
  • r7800_firmware
  • rax78_firmware
  • rax36s_firmware
  • rbs50
  • rbr40_firmware
  • rbs10
  • rbs50_firmware
  • rbr50_firmware
  • rbr50
  • xr450
  • rax120
  • rax10_firmware
  • rbr10
  • lbr20
  • rax70
  • r6700ax_firmware
  • rbs10_firmware
  • rbs350_firmware
  • rbs40_firmware
  • rax120_firmware
  • rbr20
  • rbr350_firmware
  • lbr1020
  • rbr10_firmware
  • xr500
  • rbr40
  • r9000
  • rbs350
  • rax70_firmware
  • rbr350
  • rbr20_firmware
  • xr500_firmware
  • rbs20_firmware
  • lbr1020_firmware
  • rbs40
  • r7800
  • r6700ax
  • xr450_firmware
  • rbs20
CWE
CWE-20

Improper Input Validation

CWE-306

Missing Authentication for Critical Function