NETGEAR Router Firmware: Authenticated Admin Input Validation Exploit
CVE-2026-9210 Published on June 9, 2026

Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

Vendor Advisory NVD

Weakness Type

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Products Associated with CVE-2026-9210

Want to know whenever a new CVE is published for Netgear products? stack.watch will email you.

Netgear Ex3700

Netgear Ex3800

Netgear Ex6120

Netgear Ex6130

Netgear Mr60

Netgear Mr70

Netgear Mr80

Netgear Ms60

Netgear Ms70

Netgear Ms80

Netgear R6400v2

Netgear R6700v3

Netgear R6900p

Netgear R7000

Netgear R7000p

Netgear R7960p

Netgear R8000p

Netgear R8500

Netgear Rax20

Netgear Rax35v2

Netgear Rax40v2

Netgear Rax41

Netgear Rax42

Netgear Rax43

Netgear Rax45

Netgear Rax48

Netgear Rax50

Netgear Rax50s

Netgear Raxe450

Netgear Raxe500

Netgear Xr1000

Affected Versions

NETGEAR EX3700:

Before V1.0.0.100 is affected.

NETGEAR EX3800:

Before V1.0.0.100 is affected.

NETGEAR EX6120:

Before V1.0.0.72 is affected.

NETGEAR EX6130:

Before V1.0.0.54 is affected.

NETGEAR MR60:

Before V1.1.7.132 is affected.

NETGEAR MR70:

Before V1.0.3.28 is affected.

NETGEAR MR80:

Before V1.1.7.14 is affected.

NETGEAR MS60:

Before V1.1.7.132 is affected.

NETGEAR MS70:

Before V1.0.3.28 is affected.

NETGEAR MS80:

Before V1.1.7.14 is affected.

NETGEAR R6400v2:

Before V1.0.4.128 is affected.

NETGEAR R6700v3:

Before V1.0.4.128 is affected.

NETGEAR R6900P:

Before V1.3.3.152 is affected.

NETGEAR R7000:

Before V1.0.11.216 is affected.

NETGEAR R7000P:

Before V1.3.3.152 is affected.

NETGEAR R7960P:

Before V1.4.4.92 is affected.

NETGEAR R8000P:

Before V1.4.4.92 is affected.

NETGEAR R8500:

Before and including 1.0.2.160 is affected.

NETGEAR RAX20:

Before V1.0.18.144 is affected.

NETGEAR RAX35v2:

Before V1.0.12.118 is affected.

NETGEAR RAX40v2:

Before V1.0.12.118 is affected.

NETGEAR RAX41:

Before V1.0.12.118 is affected.

NETGEAR RAX42:

Before V1.0.12.118 is affected.

NETGEAR RAX43:

Before V1.0.12.120 is affected.

NETGEAR RAX45:

Before V1.0.12.118 is affected.

NETGEAR RAX48:

Before V1.0.12.118 is affected.

NETGEAR RAX50:

Before V1.0.12.120 is affected.

NETGEAR RAX50S:

Before V1.0.12.120 is affected.

NETGEAR RAXE450:

Before V1.0.10.86 is affected.

NETGEAR RAXE500:

Before V1.0.10.86 is affected.

NETGEAR XR1000:

Before V1.0.0.68 is affected.

Exploit Probability

EPSS

0.22%

Percentile

11.83%