Files
vuln-cve/data/2026/9xxx/CVE-2026-9212.json
T

661 lines
30 KiB
JSON
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-9212",
"assignerOrgId": "a2826606-91e7-4eb6-899e-8484bd4575d5",
"state": "PUBLISHED",
"assignerShortName": "NETGEAR",
"dateReserved": "2026-05-21T17:29:04.787Z",
"datePublished": "2026-06-09T15:50:53.044Z",
"dateUpdated": "2026-11-04T17:34:33.879Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "a2826606-91e7-4eb6-899e-8484bd4575d5",
"shortName": "NETGEAR",
"dateUpdated": "2026-11-04T17:34:33.879Z"
},
"title": "Insufficient authentication and input validation in certain NETGEAR products",
"datePublic": "2026-06-09T00:00:00.000Z",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-306",
"description": "CWE-306 Missing authentication for critical function",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-20",
"description": "CWE-20 Improper input validation",
"type": "CWE"
}
]
}
],
"impacts": [
{
"capecId": "CAPEC-242",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-242 Code Injection"
}
]
}
],
"affected": [
{
"vendor": "NETGEAR",
"product": "LBR1020",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.6.4.60",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "LBR20",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.7.6.8",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "R6700AX",
"versions": [
{
"status": "affected",
"version": "0",
"lessThanOrEqual": "*",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "R7800",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V1.0.4.96",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "R9000",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V1.0.6.46",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "RAX10",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V1.0.5.50",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "RAX10v2",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V1.0.5.50",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "RAX120",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V1.2.10.56",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "RAX120v1",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V1.2.10.56",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "RAX120v2",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V1.2.10.56",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "RAX36S",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V1.0.5.50",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "RAX70",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V1.0.19.172",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "RAX78",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V1.0.19.172",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "RBR10",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.7.5.6",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "RBR20",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.7.5.6",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "RBR350",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.4.2.1",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "RBR40",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.7.5.6",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "RBR50",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.7.5.6",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "RBS10",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.7.5.6",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "RBS20",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.7.5.6",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "RBS350",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.4.2.1",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "RBS40",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.7.5.6",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "RBS50",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.7.5.6",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "XR450",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.3.3.136",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "XR500",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "v2.3.3.136",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "<p>Insufficient authentication and input validation in the&nbsp;listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.&nbsp;</p>"
}
]
}
],
"references": [
{
"url": "https://www.netgear.com/support/product/lbr20/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://www.netgear.com/support/product/lbr1020/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://www.netgear.com/support/product/r6700ax/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://www.netgear.com/support/product/r9000/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://www.netgear.com/support/product/r7800/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://www.netgear.com/support/product/rax10/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://www.netgear.com/support/product/rax120/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://www.netgear.com/support/product/rax78/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://www.netgear.com/support/product/rax120v2/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://www.netgear.com/support/product/rax70/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://www.netgear.com/support/product/rbr10/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://www.netgear.com/support/product/rbr350/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://www.netgear.com/support/product/rbr40/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://www.netgear.com/support/product/rbr50/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://www.netgear.com/support/product/rbs10/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://www.netgear.com/support/product/rbs20/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://www.netgear.com/support/product/rax36s/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://www.netgear.com/support/product/rbr20/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://www.netgear.com/support/product/rbs50/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://www.netgear.com/support/product/rbs350/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://www.netgear.com/support/product/xr500/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://www.netgear.com/support/product/rbs40/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://www.netgear.com/support/product/xr450/",
"tags": [
"product",
"patch"
]
},
{
"url": "https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory",
"tags": [
"vendor-advisory"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV4_0": {
"attackVector": "ADJACENT",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"subIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "UNREPORTED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED",
"version": "4.0",
"baseSeverity": "MEDIUM",
"baseScore": 5.6,
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/E:U"
}
}
],
"solutions": [
{
"lang": "en",
"value": "Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:\n\nProductFixed VersionLBR1020 (EoS) Orbi 4GX AC1200 Dual-Band Mesh WiFi Router V2.6.4.60 https://www.netgear.com/support/product/lbr1020/ LBR20 Orbi LTE Tri-band WiFi Router V2.7.6.8 https://www.netgear.com/support/product/lbr20/ R6700AX (EoS) 4-Stream AX1800 WiFi 6 RouterEOSR7800 (EoS) Nighthawk X4S AC2600 Smart WiFi Router V1.0.4.96 https://www.netgear.com/support/product/r7800/ R9000 (EoS) Nighthawk X10 AD7200 Smart WiFi Router V1.0.6.46 https://www.netgear.com/support/product/r9000/ RAX10 4-Stream AX1800 WiFi 6 Router V1.0.5.50 https://www.netgear.com/support/product/rax10/ RAX10v2V1.0.5.50RAX120 (EoS) Nighthawk AX12 12-Stream WiFi Router V1.2.10.56 https://www.netgear.com/support/product/rax120/ RAX120v1 (EoS)V1.2.10.56RAX120v2 Nighthawk AX12 12-Stream AX6000 WiFi Router V1.2.10.56 https://www.netgear.com/support/product/rax120v2/ RAX36S Nighthawk AX4 4-Stream AX3000 WiFi Router V1.0.5.50 https://www.netgear.com/support/product/rax36s/ RAX70 Nighthawk Tri-band AX8 8-Stream AX6600 WiFi 6 Router V1.0.19.172 https://www.netgear.com/support/product/rax70/ RAX78 Nighthawk AX8 8-Stream AX6200 Tri-Band WiFi Router V1.0.19.172 https://www.netgear.com/support/product/rax78/ RBR10 (EoS) Orbi AC1200 Dual-Band Mesh WiFi Router V2.7.5.6 https://www.netgear.com/support/product/rbr10 RBR20 (EoS) Orbi AC2200 Tri-band WiFi Router V2.7.5.6 https://www.netgear.com/support/product/rbr20 RBR350 Orbi AX1800 WiFi 6 Dual-band Mesh Router V4.4.2.1 https://www.netgear.com/support/product/rbr350/ RBR40 (EoS) Orbi AC2200 Tri-band WiFi Router V2.7.5.6 https://www.netgear.com/support/product/rbr40 RBR50 (EoS) Orbi AC3000 Tri-band WiFi Router V2.7.5.6 https://www.netgear.com/support/product/rbr50 RBS10 (EoS) Orbi AC1200 Dual-Band Mesh WiFi Add-on Satellite V2.7.5.6 https://www.netgear.com/support/product/rbs10 RBS20 (EoS) Orbi AC2200 Tri-band WiFi Add-on Satellite V2.7.5.6 https://www.netgear.com/support/product/rbs20 RBS350 Orbi AX1800 WiFi 6 Dual-band Mesh Add-on Satellite V4.4.2.1 https://www.netgear.com/support/product/rbs350/ RBS40 (EoS) Orbi AC2200 Tri-band WiFi Add-on Satellite V2.7.5.6 https://www.netgear.com/support/product/rbs40 RBS50 (EoS) Orbi AC3000 Tri-band WiFi Add-on Satellite V2.7.5.6 https://www.netgear.com/support/product/rbs50 XR450 (EoS) Nighthawk Pro Gaming Router V2.3.3.136 https://www.netgear.com/support/product/xr450/ XR500 (EoS) Nighthawk Pro Gaming Router v2.3.3.136 https://www.netgear.com/support/product/xr500/ \n\nModels marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "<p>Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:</p><table><thead><tr><th>Product</th><th>Fixed Version</th></tr></thead><tbody><tr><td><b>LBR1020 (EoS)</b> Orbi 4GX AC1200 Dual-Band Mesh WiFi Router</td><td><a href=\"https://www.netgear.com/support/product/lbr1020/\">V2.6.4.60</a></td></tr><tr><td><b>LBR20</b> Orbi LTE Tri-band WiFi Router</td><td><a href=\"https://www.netgear.com/support/product/lbr20/\">V2.7.6.8</a></td></tr><tr><td><b>R6700AX (EoS)</b> 4-Stream AX1800 WiFi 6 Router</td><td>EOS</td></tr><tr><td><b>R7800 (EoS)</b> Nighthawk X4S AC2600 Smart WiFi Router</td><td><a href=\"https://www.netgear.com/support/product/r7800/\">V1.0.4.96</a></td></tr><tr><td><b>R9000 (EoS)</b> Nighthawk X10 AD7200 Smart WiFi Router</td><td><a href=\"https://www.netgear.com/support/product/r9000/\">V1.0.6.46</a></td></tr><tr><td><b>RAX10</b> 4-Stream AX1800 WiFi 6 Router</td><td><a href=\"https://www.netgear.com/support/product/rax10/\">V1.0.5.50</a></td></tr><tr><td><b>RAX10v2</b></td><td>V1.0.5.50</td></tr><tr><td><b>RAX120 (EoS)</b> Nighthawk AX12 12-Stream WiFi Router</td><td><a href=\"https://www.netgear.com/support/product/rax120/\">V1.2.10.56</a></td></tr><tr><td><b>RAX120v1 (EoS)</b></td><td>V1.2.10.56</td></tr><tr><td><b>RAX120v2</b> Nighthawk AX12 12-Stream AX6000 WiFi Router</td><td><a href=\"https://www.netgear.com/support/product/rax120v2/\">V1.2.10.56</a></td></tr><tr><td><b>RAX36S</b> Nighthawk AX4 4-Stream AX3000 WiFi Router</td><td><a href=\"https://www.netgear.com/support/product/rax36s/\">V1.0.5.50</a></td></tr><tr><td><b>RAX70</b> Nighthawk Tri-band AX8 8-Stream AX6600 WiFi 6 Router</td><td><a href=\"https://www.netgear.com/support/product/rax70/\">V1.0.19.172</a></td></tr><tr><td><b>RAX78</b> Nighthawk AX8 8-Stream AX6200 Tri-Band WiFi Router</td><td><a href=\"https://www.netgear.com/support/product/rax78/\">V1.0.19.172</a></td></tr><tr><td><b>RBR10 (EoS)</b> Orbi AC1200 Dual-Band Mesh WiFi Router</td><td><a href=\"https://www.netgear.com/support/product/rbr10\">V2.7.5.6</a></td></tr><tr><td><b>RBR20 (EoS)</b> Orbi AC2200 Tri-band WiFi Router</td><td><a href=\"https://www.netgear.com/support/product/rbr20\">V2.7.5.6</a></td></tr><tr><td><b>RBR350</b> Orbi AX1800 WiFi 6 Dual-band Mesh Router</td><td><a href=\"https://www.netgear.com/support/product/rbr350/\">V4.4.2.1</a></td></tr><tr><td><b>RBR40 (EoS)</b> Orbi AC2200 Tri-band WiFi Router</td><td><a href=\"https://www.netgear.com/support/product/rbr40\"><span><span>V2.7.5.6</span></span></a></td></tr><tr><td><b>RBR50 (EoS)</b> Orbi AC3000 Tri-band WiFi Router</td><td><a href=\"https://www.netgear.com/support/product/rbr50\">V<span><span>2.7.5.6</span></span></a></td></tr><tr><td><b>RBS10 (EoS)</b> Orbi AC1200 Dual-Band Mesh WiFi Add-on Satellite</td><td><a href=\"https://www.netgear.com/support/product/rbs10\">V<span><span>2.7.5.6</span></span></a></td></tr><tr><td><b>RBS20 (EoS)</b> Orbi AC2200 Tri-band WiFi Add-on Satellite</td><td><a href=\"https://www.netgear.com/support/product/rbs20\">V<span><span>2.7.5.6</span></span></a></td></tr><tr><td><b>RBS350</b> Orbi AX1800 WiFi 6 Dual-band Mesh Add-on Satellite</td><td><a href=\"https://www.netgear.com/support/product/rbs350/\">V4.4.2.1</a></td></tr><tr><td><b>RBS40 (EoS)</b> Orbi AC2200 Tri-band WiFi Add-on Satellite</td><td><a href=\"https://www.netgear.com/support/product/rbs40\">V<span><span>2.7.5.6</span></span></a></td></tr><tr><td><b>RBS50 (EoS)</b> Orbi AC3000 Tri-band WiFi Add-on Satellite</td><td><a href=\"https://www.netgear.com/support/product/rbs50\">V<span><span>2.7.5.6</span></span></a></td></tr><tr><td><b>XR450 (EoS)</b> Nighthawk Pro Gaming Router</td><td><a href=\"https://www.netgear.com/support/product/xr450/\">V2.3.3.136</a></td></tr><tr><td><b>XR500 (EoS)</b> Nighthawk Pro Gaming Router</td><td><a href=\"https://www.netgear.com/support/product/xr500/\">v2.3.3.136</a></td></tr></tbody></table><p>Models marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.</p>"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "ZeroZenx Labs",
"type": "finder"
}
],
"source": {
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "Vulnogram 1.0.3"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-06-10T03:59:30.458680Z",
"id": "CVE-2026-9212",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-06-10T13:32:49.023Z"
}
}
]
}
}