Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-9210— Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router

Quick assessment

Affected

NETGEAR EX3700

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

NETGEAR Routers是美国网件（NETGEAR）公司的一系列路由器。 NETGEAR Routers存在输入验证错误漏洞，该漏洞源于输入验证不足，可能导致已通过身份验证的管理员在本地网络连接下对路由器软件和功能进行未授权修改。以下产品受到影响：ex3700、ex3800、ex6120、ex6130、mr60、mr70、mr80、ms60、ms70、ms80、r6400v2、r6700v3、r6900p、r7000、r7000p、r7960p、r8000p、r8500、rax20、rax35v2、

AI Predicted 8.1 Difficulty: Easy EPSS 0.35% · P26 Updated Jun 13, 2026

Possible ATT&CK Techniques 1 AI

T1068 · Exploitation for Privilege Escalation

Affected Version Matrix 31

Vendor	Product	Version Range	Status
NETGEAR	EX3700	`< V1.0.0.100`	affected
NETGEAR	EX3800	`< V1.0.0.100`	affected
NETGEAR	EX6120	`< V1.0.0.72`	affected
NETGEAR	EX6130	`< V1.0.0.54`	affected
NETGEAR	MR60	`< V1.1.7.132`	affected
NETGEAR	MR70	`< V1.0.3.28`	affected
NETGEAR	MR80	`< V1.1.7.14`	affected
NETGEAR	MS60	`< V1.1.7.132`	affected
NETGEAR	MS70	`< V1.0.3.28`	affected
NETGEAR	MS80	`< V1.1.7.14`	affected
NETGEAR	R6400v2	`< V1.0.4.128`	affected
NETGEAR	R6700v3	`< V1.0.4.128`	affected
NETGEAR	R6900P	`< V1.3.3.152`	affected
NETGEAR	R7000	`< V1.0.11.216`	affected
NETGEAR	R7000P	`< V1.3.3.152`	affected
NETGEAR	R7960P	`< V1.4.4.92`	affected
NETGEAR	R8000P	`< V1.4.4.92`	affected
NETGEAR	R8500	`≤ 1.0.2.160`	affected
NETGEAR	RAX20	`< V1.0.18.144`	affected
NETGEAR	RAX35v2	`< V1.0.12.118`	affected
NETGEAR	RAX40v2	`< V1.0.12.118`	affected
NETGEAR	RAX41	`< V1.0.12.118`	affected
NETGEAR	RAX42	`< V1.0.12.118`	affected
NETGEAR	RAX43	`< V1.0.12.120`	affected
NETGEAR	RAX45	`< V1.0.12.118`	affected
NETGEAR	RAX48	`< V1.0.12.118`	affected
NETGEAR	RAX50	`< V1.0.12.120`	affected
NETGEAR	RAX50S	`< V1.0.12.120`	affected
NETGEAR	RAXE450	`< V1.0.10.86`	affected
NETGEAR	RAXE500	`< V1.0.10.86`	affected
NETGEAR	XR1000	`< V1.0.0.68`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-9210

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router

Source: CVE Program / CVE List V5

Vulnerability Description

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber

Source: CVE Program / CVE List V5

Vulnerability Type

输入验证不恰当

Source: CVE Program / CVE List V5

Vulnerability Title

NETGEAR Routers 输入验证错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE
NETGEAR	EX3700	0 ~ V1.0.0.100	-
NETGEAR	EX3800	0 ~ V1.0.0.100	-
NETGEAR	EX6120	0 ~ V1.0.0.72	-
NETGEAR	EX6130	0 ~ V1.0.0.54	-
NETGEAR	MR60	0 ~ V1.1.7.132	-
NETGEAR	MR70	0 ~ V1.0.3.28	-
NETGEAR	MR80	0 ~ V1.1.7.14	-
NETGEAR	MS60	0 ~ V1.1.7.132	-
NETGEAR	MS70	0 ~ V1.0.3.28	-
NETGEAR	MS80	0 ~ V1.1.7.14	-
NETGEAR	R6400v2	0 ~ V1.0.4.128	-
NETGEAR	R6700v3	0 ~ V1.0.4.128	-
NETGEAR	R6900P	0 ~ V1.3.3.152	-
NETGEAR	R7000	0 ~ V1.0.11.216	-
NETGEAR	R7000P	0 ~ V1.3.3.152	-
NETGEAR	R7960P	0 ~ V1.4.4.92	-
NETGEAR	R8000P	0 ~ V1.4.4.92	-
NETGEAR	R8500	0 ~ 1.0.2.160	-
NETGEAR	RAX20	0 ~ V1.0.18.144	-
NETGEAR	RAX35v2	0 ~ V1.0.12.118	-
NETGEAR	RAX40v2	0 ~ V1.0.12.118	-
NETGEAR	RAX41	0 ~ V1.0.12.118	-
NETGEAR	RAX42	0 ~ V1.0.12.118	-
NETGEAR	RAX43	0 ~ V1.0.12.120	-
NETGEAR	RAX45	0 ~ V1.0.12.118	-
NETGEAR	RAX48	0 ~ V1.0.12.118	-
NETGEAR	RAX50	0 ~ V1.0.12.120	-
NETGEAR	RAX50S	0 ~ V1.0.12.120	-
NETGEAR	RAXE450	0 ~ V1.0.10.86	-
NETGEAR	RAXE500	0 ~ V1.0.10.86	-

II. Public POCs for CVE-2026-9210

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-9210

请登录查看更多情报信息。

Vendor Pages for CVE-2026-9210 (30)

🔗 RAX43 | Nighthawk AX5 5-Stream AX4200 WiFi Router product patch
🔗 RAX50 | Nighthawk AX6 6-Stream AX5400 WiFi 6 Router product patch
🔗 MS80 | Nighthawk Tri-band Mesh WiFi 6 Add-on Satellite product patch
🔗 RAX48 | Nighthawk AX6 6-Stream AX5200 WiFi 6 Router product patch
🔗 EX3700 | AC750 WiFi Range Extender Essentials Edition product patch
🔗 R7000P | Nighthawk AC2300 Smart WiFi Dual Band Gigabit Router product patch
🔗 EX3800 | AC750 WiFi Range Extender Essentials Edition product patch
🔗 RAXE450 | Nighthawk AXE10000 Tri-Band WiFi 6E Router product patch
🔗 RAX42 | Nighthawk AX5 5-Stream AX4200 WiFi Router product patch
🔗 RAX35v2 | Nighthawk AX4 4-Stream AX3000 WiFi 6 Router product patch
🔗 R7960P | Nighthawk X6S AC3600 Tri-Band WiFi Router product patch
🔗 RAXE500 | Nighthawk AX12 12-Stream AXE11000 Tri-Band WiFi 6E Router product patch
🔗 RAX40v2 | Nighthawk AX4 4-Stream WiFi Router product patch
🔗 https://www.netgear.com/support/product/rax50s/ product patch
🔗 MR60 | Nighthawk Mesh WiFi 6 Router product patch
🔗 MS60 | Nighthawk Mesh WiFi 6 Add-on Satellite product patch
🔗 R6900P | Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router product patch
🔗 MR70 | Nighthawk Mesh WiFi 6 Router product patch
🔗 R8500 | Nighthawk X8 AC5300 Smart WiFi Router product
🔗 MR80 | Nighthawk Tri-band Mesh WiFi 6 Router product patch
🔗 EX6130 | AC1200 WiFi Range Extender product patch
🔗 MS70 | Nighthawk Mesh WiFi 6 Add-on Satellite product patch
🔗 R8000P | Nighthawk X6S AC4000 Tri Band WiFi Router product patch
🔗 R6400v2 | AC1750 Smart WiFi Router 802.11ac Dual Band Gigabit product patch
🔗 R7000 | Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router product patch
🔗 EX6120 | AC1200 Dual Band WiFi Range Extender product patch
🔗 RAX45 | Nighthawk AX6 6-Stream AX4300 WiFi Router product patch
🔗 RAX20 | 4-Stream AX1800 WiFi 6 Router product patch
🔗 RAX41 | Nighthawk AX5 5-Stream AX3600 WiFi Router product patch
🔗 XR1000 | Nighthawk WiFi 6 Pro Gaming Router product patch

https://www.cve.org/CVERecord?id=CVE-2026-9210

Same Patch Batch · NETGEAR · 2026-06-09 · 17 CVEs total

CVE-2026-0412		Insufficient input validation vulnerability in NETGEAR JR6150 Web UI
CVE-2026-0414		Insufficient Input Validation Allows Unauthorized Modification of Router Software in certa
CVE-2026-0420		Missing TLS certificate validation in NETGEAR's ReadyCloud client app
CVE-2026-0415		Insufficient input validation vulnerability in certain Orbi routers
CVE-2026-0417		Insufficient input validation in certain NETGEAR routers
CVE-2026-0418		Certain NETGEAR devices allow administrators to tamper with system
CVE-2026-0416		Improper input validation in certain NETGEAR routers allows unauthorized modification of p
CVE-2026-0410		Insufficient input validation in certain NETGEAR routers
CVE-2026-0409		Netgear Orbi 370 Series Remote Code Execution vulnerability
CVE-2026-0411		A Sensitive Information Disclosure Vulnerability in NETGEAR Orbi Satellites
CVE-2026-0419		Insufficient input validation vulnerability in NETGEAR JR6150
CVE-2026-0413		Buffer overflow vulnerability in certain NETGEAR Nighthawk routers
CVE-2026-3088		Unauthenticated users can disrupt router operation
CVE-2026-9213		Insufficient input validation in certain NETGEAR routers
CVE-2026-9211		Certain NETGEAR routers allow unauthenticated users to gain control of the router
CVE-2026-9212		Insufficient authentication and input validation in certain NETGEAR products

IV. Related Vulnerabilities

Same product: EX3700

CVE-2025-5934
Netgear EX3700 mtd sub_41619C stack-based overflow

Same vendor: NETGEAR

Same weakness: CWE-20

V. Comments for CVE-2026-9210

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-9210— Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router

Quick assessment

Possible ATT&CK Techniques 1 AI

Affected Version Matrix 31

I. Basic Information for CVE-2026-9210

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2026-9210

III. Intelligence Information for CVE-2026-9210

Vendor Pages for CVE-2026-9210 (30)

Same Patch Batch · NETGEAR · 2026-06-09 · 17 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2026-9210

Leave a comment