MEDIUM · 4.5

CVE-2026-9210

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and fun...

Vulnerability Description

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

CVSS Score

4.5

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
NetgearEx3700 Firmware< 1.0.0.100
NetgearEx3700-
NetgearEx3800 Firmware< 1.0.0.100
NetgearEx3800-
NetgearEx6120 Firmware< 1.0.0.72
NetgearEx6120-
NetgearEx6130 Firmware< 1.0.0.54
NetgearEx6130-
NetgearMr60 Firmware< 1.1.7.132
NetgearMr60-
NetgearMr70 Firmware< 1.0.3.28
NetgearMr70-
NetgearMr80 Firmware< 1.1.7.14
NetgearMr80-
NetgearMs60 Firmware< 1.1.7.132
NetgearMs60-
NetgearMs70 Firmware< 1.0.3.28
NetgearMs70-
NetgearMs80 Firmware< 1.1.7.14
NetgearMs80-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2026-9210?

CVE-2026-9210 is a vulnerability with a CVSS score of 4.5 (MEDIUM). Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and fun...

How severe is CVE-2026-9210?

CVE-2026-9210 has been rated MEDIUM with a CVSS base score of 4.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-9210?

Check the references section above for vendor advisories and patch information. Affected products include: Netgear Ex3700 Firmware, Netgear Ex3700, Netgear Ex3800 Firmware, Netgear Ex3800, Netgear Ex6120 Firmware.