CVE-2026-9210
Medium
Description
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
SeverityMedium
CVSS4.5
Exploit probability—
Product
Netgear Ex3700 Firmware
PublishedJun 9, 2026
First seenJun 9, 2026
Weakness typeCWE-20Improper input validation
How to fix
Update
- netgear ex3700_firmware1.0.0.100 or later
- netgear ex3800_firmware1.0.0.100 or later
- netgear ex6120_firmware1.0.0.72 or later
- netgear ex6130_firmware1.0.0.54 or later
- netgear mr60_firmware1.1.7.132 or later
- netgear mr70_firmware1.0.3.28 or later
- netgear mr80_firmware1.1.7.14 or later
- netgear ms60_firmware1.1.7.132 or later
- netgear ms70_firmware1.0.3.28 or later
- netgear ms80_firmware1.1.7.14 or later
- netgear r6400v2_firmware1.0.4.128 or later
- netgear r6700v3_firmware1.0.4.128 or later
Patches
- netgear.com/support/product/ex3700/
- netgear.com/support/product/ex3800/
- netgear.com/support/product/ex6120/
- netgear.com/support/product/mr60/
- netgear.com/support/product/ex6130/
- netgear.com/support/product/ms70/
- netgear.com/support/product/ms60/
- netgear.com/support/product/mr80/
- netgear.com/support/product/ms80/
- netgear.com/support/product/mr70/
- netgear.com/support/product/r6400v2/
- netgear.com/support/product/r6700v3/
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netgear ex3700_firmware | v < 1.0.0.100 | 1.0.0.100 |
| netgear ex3800_firmware | v < 1.0.0.100 | 1.0.0.100 |
| netgear ex6120_firmware | v < 1.0.0.72 | 1.0.0.72 |
| netgear ex6130_firmware | v < 1.0.0.54 | 1.0.0.54 |
| netgear mr60_firmware | v < 1.1.7.132 | 1.1.7.132 |
| netgear mr70_firmware | v < 1.0.3.28 | 1.0.3.28 |
| netgear mr80_firmware | v < 1.1.7.14 | 1.1.7.14 |
| netgear ms60_firmware | v < 1.1.7.132 | 1.1.7.132 |
| netgear ms70_firmware | v < 1.0.3.28 | 1.0.3.28 |
| netgear ms80_firmware | v < 1.1.7.14 | 1.1.7.14 |
| netgear r6400v2_firmware | v < 1.0.4.128 | 1.0.4.128 |
| netgear r6700v3_firmware | v < 1.0.4.128 | 1.0.4.128 |
| netgear r6900p_firmware | v < 1.3.3.152 | 1.3.3.152 |
| netgear r7000_firmware | v < 1.0.11.216 | 1.0.11.216 |
| netgear r7000p_firmware | v < 1.3.3.152 | 1.3.3.152 |
| netgear r7960p_firmware | v < 1.4.4.92 | 1.4.4.92 |
| netgear r8000p_firmware | v < 1.4.4.92 | 1.4.4.92 |
| netgear r8500_firmware | No range specified | — |
| netgear rax20_firmware | v < 1.0.18.144 | 1.0.18.144 |
| netgear rax35v2_firmware | v < 1.0.12.118 | 1.0.12.118 |
| netgear rax40v2_firmware | v < 1.0.12.118 | 1.0.12.118 |
| netgear rax41_firmware | v < 1.0.12.118 | 1.0.12.118 |
| netgear rax42_firmware | v < 1.0.12.118 | 1.0.12.118 |
| netgear rax43_firmware | v < 1.0.12.120 | 1.0.12.120 |
| netgear rax48_firmware | v < 1.0.12.118 | 1.0.12.118 |
| netgear rax50_firmware | v < 1.0.12.120 | 1.0.12.120 |
| netgear rax50s_firmware | v < 1.0.12.120 | 1.0.12.120 |
| netgear raxe450_firmware | v < 1.0.10.86 | 1.0.10.86 |
| netgear raxe500_firmware | v < 1.0.10.86 | 1.0.10.86 |
| netgear xr1000_firmware | v < 1.0.0.68 | 1.0.0.68 |
| netgear rax45_firmware | v < 1.0.12.118 | 1.0.12.118 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.