# CVE-2026-9212: Insufficient authentication and input validation in certain NETGEAR products

Status: published. Published: 2026-06-09. Updated: 2026-11-04.

Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.

## Remediation

- fix: Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:

ProductFixed VersionLBR1020 (EoS) Orbi 4GX AC1200 Dual-Band Mesh WiFi Router V2.6.4.60 https://www.netgear.com/support/product/lbr1020/ LBR20 Orbi LTE Tri-band WiFi Router V2.7.6.8 https://www.netgear.com/support/product/lbr20/ R6700AX (EoS) 4-Stream AX1800 WiFi 6 RouterEOSR7800 (EoS) Nighthawk X4S AC2600 Smart WiFi Router V1.0.4.96 https://www.netgear.com/support/product/r7800/ R9000 (EoS) Nighthawk X10 AD7200 Smart WiFi Router V1.0.6.46 https://www.netgear.com/support/product/r9000/ RAX10 4-Stream AX1800 WiFi 6 Router V1.0.5.50 https://www.netgear.com/support/product/rax10/ RAX10v2V1.0.5.50RAX120 (EoS) Nighthawk AX12 12-Stream WiFi Router V1.2.10.56 https://www.netgear.com/support/product/rax120/ RAX120v1 (EoS)V1.2.10.56RAX120v2 Nighthawk AX12 12-Stream AX6000 WiFi Router V1.2.10.56 https://www.netgear.com/support/product/rax120v2/ RAX36S Nighthawk AX4 4-Stream AX3000 WiFi Router V1.0.5.50 https://www.netgear.com/support/product/rax36s/ RAX70 Nighthawk Tri-band AX8 8-Stream AX6600 WiFi 6 Router V1.0.19.172 https://www.netgear.com/support/product/rax70/ RAX78 Nighthawk AX8 8-Stream AX6200 Tri-Band WiFi Router V1.0.19.172 https://www.netgear.com/support/product/rax78/ RBR10 (EoS) Orbi AC1200 Dual-Band Mesh WiFi Router V2.7.5.6 https://www.netgear.com/support/product/rbr10 RBR20 (EoS) Orbi AC2200 Tri-band WiFi Router V2.7.5.6 https://www.netgear.com/support/product/rbr20 RBR350 Orbi AX1800 WiFi 6 Dual-band Mesh Router V4.4.2.1 https://www.netgear.com/support/product/rbr350/ RBR40 (EoS) Orbi AC2200 Tri-band WiFi Router V2.7.5.6 https://www.netgear.com/support/product/rbr40 RBR50 (EoS) Orbi AC3000 Tri-band WiFi Router V2.7.5.6 https://www.netgear.com/support/product/rbr50 RBS10 (EoS) Orbi AC1200 Dual-Band Mesh WiFi Add-on Satellite V2.7.5.6 https://www.netgear.com/support/product/rbs10 RBS20 (EoS) Orbi AC2200 Tri-band WiFi Add-on Satellite V2.7.5.6 https://www.netgear.com/support/product/rbs20 RBS350 Orbi AX1800 WiFi 6 Dual-band Mesh Add-on Satellite V4.4.2.1 https://www.netgear.com/support/product/rbs350/ RBS40 (EoS) Orbi AC2200 Tri-band WiFi Add-on Satellite V2.7.5.6 https://www.netgear.com/support/product/rbs40 RBS50 (EoS) Orbi AC3000 Tri-band WiFi Add-on Satellite V2.7.5.6 https://www.netgear.com/support/product/rbs50 XR450 (EoS) Nighthawk Pro Gaming Router V2.3.3.136 https://www.netgear.com/support/product/xr450/ XR500 (EoS) Nighthawk Pro Gaming Router v2.3.3.136 https://www.netgear.com/support/product/xr500/ 

Models marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support. (source: CNA: NETGEAR)
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/lbr20/
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/lbr1020/
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/r6700ax/
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/r9000/
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/r7800/
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/rax10/
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/rax120/
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/rax78/
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/rax120v2/
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/rax70/
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/rbr10/
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/rbr350/
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/rbr40/
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/rbr50/
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/rbs10/
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/rbs20/
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/rax36s/
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/rbr20/
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/rbs50/
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/rbs350/
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/xr500/
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/rbs40/
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: NETGEAR) — https://www.netgear.com/support/product/xr450/

## Affected products and versions

- NETGEAR / LBR1020: ≥ 0; < V2.6.4.60 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / LBR20: ≥ 0; < V2.7.6.8 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / R6700AX: ≥ 0; ≤ * (affected, custom). Source: CNA: NETGEAR
- NETGEAR / R7800: ≥ 0; < V1.0.4.96 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / R9000: ≥ 0; < V1.0.6.46 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / RAX10: ≥ 0; < V1.0.5.50 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / RAX10v2: ≥ 0; < V1.0.5.50 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / RAX120: ≥ 0; < V1.2.10.56 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / RAX120v1: ≥ 0; < V1.2.10.56 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / RAX120v2: ≥ 0; < V1.2.10.56 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / RAX36S: ≥ 0; < V1.0.5.50 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / RAX70: ≥ 0; < V1.0.19.172 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / RAX78: ≥ 0; < V1.0.19.172 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / RBR10: ≥ 0; < 2.7.5.6 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / RBR20: ≥ 0; < 2.7.5.6 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / RBR350: ≥ 0; < V4.4.2.1 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / RBR40: ≥ 0; < 2.7.5.6 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / RBR50: ≥ 0; < 2.7.5.6 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / RBS10: ≥ 0; < 2.7.5.6 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / RBS20: ≥ 0; < 2.7.5.6 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / RBS350: ≥ 0; < V4.4.2.1 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / RBS40: ≥ 0; < 2.7.5.6 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / RBS50: ≥ 0; < 2.7.5.6 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / XR450: ≥ 0; < V2.3.3.136 (affected, custom). Source: CNA: NETGEAR
- NETGEAR / XR500: ≥ 0; < v2.3.3.136 (affected, custom). Source: CNA: NETGEAR

## Severity and prioritization

- CVSS 4.0: 5.6 (medium); CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/E:U; source: CNA: NETGEAR

- CISA KEV: No listing in collected sources

- EPSS: 0.27% as of 2026-11-04; percentile 19.27%

- SSVC: exploitation none; automatable no; technical impact total; source ADP: CISA-ADP

- Weaknesses: CWE-306, CWE-20

## Exploit evidence

No exploit evidence in collected sources. This is not proof of no exploitation.

## References

- https://www.netgear.com/support/product/lbr20/ (CNA: NETGEAR; product, patch)

- https://www.netgear.com/support/product/lbr1020/ (CNA: NETGEAR; product, patch)

- https://www.netgear.com/support/product/r6700ax/ (CNA: NETGEAR; product, patch)

- https://www.netgear.com/support/product/r9000/ (CNA: NETGEAR; product, patch)

- https://www.netgear.com/support/product/r7800/ (CNA: NETGEAR; product, patch)

- https://www.netgear.com/support/product/rax10/ (CNA: NETGEAR; product, patch)

- https://www.netgear.com/support/product/rax120/ (CNA: NETGEAR; product, patch)

- https://www.netgear.com/support/product/rax78/ (CNA: NETGEAR; product, patch)

- https://www.netgear.com/support/product/rax120v2/ (CNA: NETGEAR; product, patch)

- https://www.netgear.com/support/product/rax70/ (CNA: NETGEAR; product, patch)

- https://www.netgear.com/support/product/rbr10/ (CNA: NETGEAR; product, patch)

- https://www.netgear.com/support/product/rbr350/ (CNA: NETGEAR; product, patch)

- https://www.netgear.com/support/product/rbr40/ (CNA: NETGEAR; product, patch)

- https://www.netgear.com/support/product/rbr50/ (CNA: NETGEAR; product, patch)

- https://www.netgear.com/support/product/rbs10/ (CNA: NETGEAR; product, patch)

- https://www.netgear.com/support/product/rbs20/ (CNA: NETGEAR; product, patch)

- https://www.netgear.com/support/product/rax36s/ (CNA: NETGEAR; product, patch)

- https://www.netgear.com/support/product/rbr20/ (CNA: NETGEAR; product, patch)

- https://www.netgear.com/support/product/rbs50/ (CNA: NETGEAR; product, patch)

- https://www.netgear.com/support/product/rbs350/ (CNA: NETGEAR; product, patch)

- https://www.netgear.com/support/product/xr500/ (CNA: NETGEAR; product, patch)

- https://www.netgear.com/support/product/rbs40/ (CNA: NETGEAR; product, patch)

- https://www.netgear.com/support/product/xr450/ (CNA: NETGEAR; product, patch)

- https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory (CNA: NETGEAR; vendor-advisory)

## Provenance

- CNA: NETGEAR: https://www.cve.org/CVERecord?id=CVE-2026-9212; retrieved 2026-11-04; source updated 2026-11-04

- FIRST EPSS: https://api.first.org/data/v1/epss?cve=CVE-2026-9212; retrieved 2026-11-04; source updated Not reported

Revision: c819ea810fa139ce1de50efba2ad8f28bf334ff70869884b270afb38660518e8

Canonical: https://y2.dev/cve/CVE-2026-9212

## Agent and API access

Public CVE pages, Markdown, and JSON are free to read without an account or API key.

- Public catalog: https://y2.dev/cve/index.json. Follow nextCursor with the same search, filters, sort, and limit (1–100). A null cursor marks the end.

- WebMCP: search_cve_disclosures, get_cve_disclosure, get_cve_page_markdown, get_y2_cve_access. Available in compatible browsers.

- Cyber API: https://api.y2.dev/api/v2/cyber/cves and https://api.y2.dev/api/v2/cyber/cves/{cveId}.

- Y2 Pro or Elite: create a workspace API key with the intel:cyber scope and send Authorization: Bearer <Y2_API_KEY>. Setup: https://y2.dev/docs/api/create-key.

- x402: Pay per request without an account or API key. Omit Authorization, read the HTTP 402 PAYMENT-REQUIRED challenge, validate its current requirements, and retry with PAYMENT-SIGNATURE through an authorized payment client. These browser tools never make payments. Guide: https://y2.dev/docs/api/x402.

- OpenAPI: https://y2.dev/api/openapi.yaml. Agent access metadata: https://y2.dev/cve/agent.json.

Collected public records only. Check source status for coverage and freshness.