NETGEAR Router NTP Input Validation Flaw Enables Remote Command Execution
CVE-2026-9218 Published on October 13, 2026
Insufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized access
Insufficient input validation vulnerability in time server (NTP) setting of the listed NETGEAR models allows an attacker who is connected to the routers local network and has the routers administrator credentials to run unauthorized commands on the router. This vulnerability could impact the integrity of the affected router. There is no impact on confidentiality or availability of the affected router.
Vulnerability Analysis
Weakness Type
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Products Associated with CVE-2026-9218
stack.watch emails you whenever new vulnerabilities are published in Netgear R7000 or Netgear R7000p. Just hit a watch button to start following.
Affected Versions
NETGEAR CBR40:- Before * is affected.
- Before v1.0.11.130 is affected.
- Before V1.3.3.152 is affected.
- Before V1.0.3.64 is affected.