Insufficient authentication and input validation in certain NETGEAR products

5.6 / 10

MEDIUM

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/E:U

Description

Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting product's confidentiality or change certain configurations.

Basic Information

ID CVE-2026-9212

Source NETGEAR

Published Jun 9, 2026 at 15:50

Affected Product

Vendor NETGEAR

Product LBR1020

Affected Versions NETGEAR LBR1020 0
NETGEAR LBR20 0
NETGEAR R6700AX 0
NETGEAR R7800 0
NETGEAR R9000 0
NETGEAR RAX10 0
NETGEAR RAX10v2 0
NETGEAR RAX120 0
NETGEAR RAX120v1 0
NETGEAR RAX120v2 0
NETGEAR RAX36S 0
NETGEAR RAX70 0
NETGEAR RAX78 0
NETGEAR RBR10 0
NETGEAR RBR20 0
NETGEAR RBR350 0
NETGEAR RBR40 0
NETGEAR RBR50 0
NETGEAR RBS10 0
NETGEAR RBS20 0
NETGEAR RBS350 0
NETGEAR RBS40 0
NETGEAR RBS50 0
NETGEAR XR450 0
NETGEAR XR500 0

CWE Classification

CWE-306 CWE-20

References

{
    "lastseen": "",
    "description": "Insufficient authentication and input validation in the\u00a0listed NETGEAR models allow users connected to the local network to execute commands impacting product's confidentiality or change certain configurations.",
    "published": "2026-06-09T15:50:53.044Z",
    "modified": "2026-06-09T15:50:53.044Z",
    "type": "cve",
    "title": "Insufficient authentication and input validation in certain NETGEAR products",
    "source": "NETGEAR",
    "references": "https://www.netgear.com/support/product/lbr20/\nhttps://www.netgear.com/support/product/lbr1020/\nhttps://www.netgear.com/support/product/r6700ax/\nhttps://www.netgear.com/support/product/r9000/\nhttps://www.netgear.com/support/product/r7800/\nhttps://www.netgear.com/support/product/rax10/\nhttps://www.netgear.com/support/product/rax120/\nhttps://www.netgear.com/support/product/rax78/\nhttps://www.netgear.com/support/product/rax120v2/\nhttps://www.netgear.com/support/product/rax70/\nhttps://www.netgear.com/support/product/rbr10/\nhttps://www.netgear.com/support/product/rbr350/\nhttps://www.netgear.com/support/product/rbr40/\nhttps://www.netgear.com/support/product/rbr50/\nhttps://www.netgear.com/support/product/rbs10/\nhttps://www.netgear.com/support/product/rbs20/\nhttps://www.netgear.com/support/product/rax36s/\nhttps://www.netgear.com/support/product/rbr20/\nhttps://www.netgear.com/support/product/rbs50/\nhttps://www.netgear.com/support/product/rbs350/\nhttps://www.netgear.com/support/product/xr500/\nhttps://www.netgear.com/support/product/rbs40/\nhttps://www.netgear.com/support/product/xr450/",
    "id": "CVE-2026-9212",
    "bulletinFamily": "",
    "cwe": [
        "CWE-306",
        "CWE-20"
    ],
    "cvelist": null,
    "sourceData": "NETGEAR LBR1020 0\nNETGEAR LBR20 0\nNETGEAR R6700AX 0\nNETGEAR R7800 0\nNETGEAR R9000 0\nNETGEAR RAX10 0\nNETGEAR RAX10v2 0\nNETGEAR RAX120 0\nNETGEAR RAX120v1 0\nNETGEAR RAX120v2 0\nNETGEAR RAX36S 0\nNETGEAR RAX70 0\nNETGEAR RAX78 0\nNETGEAR RBR10 0\nNETGEAR RBR20 0\nNETGEAR RBR350 0\nNETGEAR RBR40 0\nNETGEAR RBR50 0\nNETGEAR RBS10 0\nNETGEAR RBS20 0\nNETGEAR RBS350 0\nNETGEAR RBS40 0\nNETGEAR RBS50 0\nNETGEAR XR450 0\nNETGEAR XR500 0",
    "sourceHref": "",
    "cvss": {
        "score": 5.6,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/E:U",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "LBR1020",
    "version": "0",
    "vendor": "NETGEAR",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}

Insufficient authentication and input validation in certain NETGEAR products_CVE-2026-9212