Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-9216— Insufficient input validation vulnerability exists in certain NETGEAR RAX Models

Quick assessment

Affected

NETGEAR RAX30

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

NETGEAR rax30是美国NETGEAR公司的一款无线路由器。 NETGEAR rax30 V1.0.9.92之前版本、NETGEAR RAX35 V1.0.10.72之前版本、NETGEAR RAX38 V1.0.6.106之前版本、NETGEAR RAX40 V1.0.6.106之前版本和NETGEAR RAXE300 V1.0.10.72之前版本存在缓冲区错误漏洞，该漏洞源于输入验证不足，可能导致具有网络访问权限的网络邻近攻击者使路由器管理界面崩溃。

CVSS 3.5 · Low EPSS 0.36% · P30 Updated Oct 14, 2026

Possible ATT&CK Techniques 1 AI

T1497 · Virtualization/Sandbox Evasion

Affected Version Matrix 5

Vendor	Product	Version Range	Status
NETGEAR	RAX30	`< V1.0.9.92`	affected
NETGEAR	RAX35	`< V1.0.10.72`	affected
NETGEAR	RAX38	`< V1.0.6.106`	affected
NETGEAR	RAX40	`< V1.0.6.106`	affected
NETGEAR	RAXE300	`< V1.0.9.82`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-9216

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Insufficient input validation vulnerability exists in certain NETGEAR RAX Models

Source: CVE Program / CVE List V5

Vulnerability Description

An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Source: CVE Program / CVE List V5

Vulnerability Type

栈缓冲区溢出

Source: CVE Program / CVE List V5

Vulnerability Title

NETGEAR rax30 缓冲区错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE
NETGEAR	RAX30	0 ~ V1.0.9.92	-
NETGEAR	RAX35	0 ~ V1.0.10.72	-
NETGEAR	RAX38	0 ~ V1.0.6.106	-
NETGEAR	RAX40	0 ~ V1.0.6.106	-
NETGEAR	RAXE300	0 ~ V1.0.9.82	-

II. Public POCs for CVE-2026-9216

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-9216

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-9216 (1)

🔗 September 2026 NETGEAR Security Advisory - NETGEAR Support vendor-advisory patch

Vendor Pages for CVE-2026-9216 (4)

🔗 RAX35 | Nighthawk AX4 4-Stream WiFi 6 Router product patch
RAXE300 | Nighthawk AXE7800 Tri-Band WiFi 6E Router product patch
🔗 RAX40 | Nighthawk AX4 4-Stream WiFi Router product patch
🔗 RAX38 | Nighthawk AX4 4-Stream AX3000 WiFi Router product patch

https://www.cve.org/CVERecord?id=CVE-2026-9216

IV. Related Vulnerabilities

Same product: RAX30

Same vendor: NETGEAR

Same weakness: CWE-121