CVE-2026-9212
Insufficient authentication and input validation in certain NETGEAR products
Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.
Fixes and workarounds
Fix
Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in: ProductFixed VersionLBR1020 (EoS) Orbi 4GX AC1200 Dual-Band Mesh WiFi Router V2.6.4.60 https://www.netgear.com/support/product/lbr1020/ LBR20 Orbi LTE Tri-band WiFi Router V2.7.6.8 https://www.netgear.com/support/product/lbr20/ R6700AX (EoS) 4-Stream AX1800 WiFi 6 RouterEOSR7800 (EoS) Nighthawk X4S AC2600 Smart WiFi Router V1.0.4.96 https://www.netgear.com/support/product/r7800/ R9000 (EoS) Nighthawk X10 AD7200 Smart WiFi Router V1.0.6.46 https://www.netgear.com/support/product/r9000/ RAX10 4-Stream AX1800 WiFi 6 Router V1.0.5.50 https://www.netgear.com/support/product/rax10/ RAX10v2V1.0.5.50RAX120 (EoS) Nighthawk AX12 12-Stream WiFi Router V1.2.10.56 https://www.netgear.com/support/product/rax120/ RAX120v1 (EoS)V1.2.10.56RAX120v2 Nighthawk AX12 12-Stream AX6000 WiFi Router V1.2.10.56 https://www.netgear.com/support/product/rax120v2/ RAX36S Nighthawk AX4 4-Stream AX3000 WiFi Router V1.0.5.50 https://www.netgear.com/support/product/rax36s/ RAX70 Nighthawk Tri-band AX8 8-Stream AX6600 WiFi 6 Router V1.0.19.172 https://www.netgear.com/support/product/rax70/ RAX78 Nighthawk AX8 8-Stream AX6200 Tri-Band WiFi Router V1.0.19.172 https://www.netgear.com/support/product/rax78/ RBR10 (EoS) Orbi AC1200 Dual-Band Mesh WiFi Router V2.7.5.6 https://www.netgear.com/support/product/rbr10 RBR20 (EoS) Orbi AC2200 Tri-band WiFi Router V2.7.5.6 https://www.netgear.com/support/product/rbr20 RBR350 Orbi AX1800 WiFi 6 Dual-band Mesh Router V4.4.2.1 https://www.netgear.com/support/product/rbr350/ RBR40 (EoS) Orbi AC2200 Tri-band WiFi Router V2.7.5.6 https://www.netgear.com/support/product/rbr40 RBR50 (EoS) Orbi AC3000 Tri-band WiFi Router V2.7.5.6 https://www.netgear.com/support/product/rbr50 RBS10 (EoS) Orbi AC1200 Dual-Band Mesh WiFi Add-on Satellite V2.7.5.6 https://www.netgear.com/support/product/rbs10 RBS20 (EoS) Orbi AC2200 Tri-band WiFi Add-on Satellite V2.7.5.6 https://www.netgear.com/support/product/rbs20 RBS350 Orbi AX1800 WiFi 6 Dual-band Mesh Add-on Satellite V4.4.2.1 https://www.netgear.com/support/product/rbs350/ RBS40 (EoS) Orbi AC2200 Tri-band WiFi Add-on Satellite V2.7.5.6 https://www.netgear.com/support/product/rbs40 RBS50 (EoS) Orbi AC3000 Tri-band WiFi Add-on Satellite V2.7.5.6 https://www.netgear.com/support/product/rbs50 XR450 (EoS) Nighthawk Pro Gaming Router V2.3.3.136 https://www.netgear.com/support/product/xr450/ XR500 (EoS) Nighthawk Pro Gaming Router v2.3.3.136 https://www.netgear.com/support/product/xr500/ Models marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARFix
The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.
Source: CNA: NETGEARAffected products and versions
| Product | Versions | Authority |
|---|---|---|
| LBR1020 NETGEAR |
≥ 0; < V2.6.4.60 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| LBR20 NETGEAR |
≥ 0; < V2.7.6.8 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| R6700AX NETGEAR |
≥ 0; ≤ * (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| R7800 NETGEAR |
≥ 0; < V1.0.4.96 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| R9000 NETGEAR |
≥ 0; < V1.0.6.46 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| RAX10 NETGEAR |
≥ 0; < V1.0.5.50 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| RAX10v2 NETGEAR |
≥ 0; < V1.0.5.50 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| RAX120 NETGEAR |
≥ 0; < V1.2.10.56 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| RAX120v1 NETGEAR |
≥ 0; < V1.2.10.56 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| RAX120v2 NETGEAR |
≥ 0; < V1.2.10.56 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| RAX36S NETGEAR |
≥ 0; < V1.0.5.50 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| RAX70 NETGEAR |
≥ 0; < V1.0.19.172 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| RAX78 NETGEAR |
≥ 0; < V1.0.19.172 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| RBR10 NETGEAR |
≥ 0; < 2.7.5.6 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| RBR20 NETGEAR |
≥ 0; < 2.7.5.6 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| RBR350 NETGEAR |
≥ 0; < V4.4.2.1 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| RBR40 NETGEAR |
≥ 0; < 2.7.5.6 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| RBR50 NETGEAR |
≥ 0; < 2.7.5.6 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| RBS10 NETGEAR |
≥ 0; < 2.7.5.6 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| RBS20 NETGEAR |
≥ 0; < 2.7.5.6 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| RBS350 NETGEAR |
≥ 0; < V4.4.2.1 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| RBS40 NETGEAR |
≥ 0; < 2.7.5.6 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| RBS50 NETGEAR |
≥ 0; < 2.7.5.6 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| XR450 NETGEAR |
≥ 0; < V2.3.3.136 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
| XR500 NETGEAR |
≥ 0; < v2.3.3.136 (affected, custom)
Other versions: unaffected |
CNA: NETGEAR |
Version ranges are source assertions. Check the vendor advisory and your installed configuration before determining exposure.
CVSS assessments
| Version / score | Vector | Authority |
|---|---|---|
| 4.0 / 5.6 medium |
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/E:U | CNA: NETGEAR |
Exploit evidence
No exploit evidence in collected sources. This is not proof of no exploitation.
References
- https://www.netgear.com/support/product/lbr20/CNA: NETGEAR · product, patch
- https://www.netgear.com/support/product/lbr1020/CNA: NETGEAR · product, patch
- https://www.netgear.com/support/product/r6700ax/CNA: NETGEAR · product, patch
- https://www.netgear.com/support/product/r9000/CNA: NETGEAR · product, patch
- https://www.netgear.com/support/product/r7800/CNA: NETGEAR · product, patch
- https://www.netgear.com/support/product/rax10/CNA: NETGEAR · product, patch
- https://www.netgear.com/support/product/rax120/CNA: NETGEAR · product, patch
- https://www.netgear.com/support/product/rax78/CNA: NETGEAR · product, patch
- https://www.netgear.com/support/product/rax120v2/CNA: NETGEAR · product, patch
- https://www.netgear.com/support/product/rax70/CNA: NETGEAR · product, patch
- https://www.netgear.com/support/product/rbr10/CNA: NETGEAR · product, patch
- https://www.netgear.com/support/product/rbr350/CNA: NETGEAR · product, patch
- https://www.netgear.com/support/product/rbr40/CNA: NETGEAR · product, patch
- https://www.netgear.com/support/product/rbr50/CNA: NETGEAR · product, patch
- https://www.netgear.com/support/product/rbs10/CNA: NETGEAR · product, patch
- https://www.netgear.com/support/product/rbs20/CNA: NETGEAR · product, patch
- https://www.netgear.com/support/product/rax36s/CNA: NETGEAR · product, patch
- https://www.netgear.com/support/product/rbr20/CNA: NETGEAR · product, patch
- https://www.netgear.com/support/product/rbs50/CNA: NETGEAR · product, patch
- https://www.netgear.com/support/product/rbs350/CNA: NETGEAR · product, patch
- https://www.netgear.com/support/product/xr500/CNA: NETGEAR · product, patch
- https://www.netgear.com/support/product/rbs40/CNA: NETGEAR · product, patch
- https://www.netgear.com/support/product/xr450/CNA: NETGEAR · product, patch
- https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-AdvisoryCNA: NETGEAR · vendor-advisory
For agents and automation
Read public disclosures for free as Markdown or JSON. Compatible browsers also expose native WebMCP tools to search disclosures, read this page, and discover API access.
Use the ontology-linked Cyber API with x402 pay per request, or a Y2 Pro or Elite API key with the intel:cyber scope.
Endpoints and access details
https://api.y2.dev/api/v2/cyber/cveshttps://api.y2.dev/api/v2/cyber/cves/{cveId}
A workspace owner or admin can create a Pro or Elite API key. Send Authorization: Bearer <Y2_API_KEY> from your trusted agent runtime.
For x402, omit Authorization and read the HTTP 402 payment challenge before signing a retry. Public browser tools do not make payments.