CVE-2026-9212
High
Description
Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.
SeverityHigh
CVSS8.0
Exploit probability—
Product
Netgear Lbr1020 Firmware
PublishedJun 9, 2026
First seenJun 9, 2026
How to fix
Update
- netgear lbr1020_firmware2.6.4.60 or later
- netgear lbr20_firmware2.7.6.8 or later
- netgear r7800_firmware1.0.4.96 or later
- netgear r9000_firmware1.0.6.46 or later
- netgear rax10_firmware1.0.5.50 or later
- netgear rax120_firmware1.2.10.56 or later
- netgear rax36s_firmware1.0.5.50 or later
- netgear rax70_firmware1.0.19.172 or later
- netgear rax78_firmware1.0.19.172 or later
- netgear rbr350_firmware4.4.2.1 or later
- netgear rbs350_firmware4.4.2.1 or later
- netgear xr450_firmware2.3.3.136 or later
Patches
- netgear.com/support/product/lbr20/
- netgear.com/support/product/lbr1020/
- netgear.com/support/product/r6700ax/
- netgear.com/support/product/r9000/
- netgear.com/support/product/r7800/
- netgear.com/support/product/rax10/
- netgear.com/support/product/rax120/
- netgear.com/support/product/rax78/
- netgear.com/support/product/rax120v2/
- netgear.com/support/product/rax70/
- netgear.com/support/product/rbr10/
- netgear.com/support/product/rbr350/
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netgear lbr1020_firmware | v < 2.6.4.60 | 2.6.4.60 |
| netgear lbr20_firmware | v < 2.7.6.8 | 2.7.6.8 |
| netgear r6700ax_firmware | No range specified | — |
| netgear r7800_firmware | v < 1.0.4.96 | 1.0.4.96 |
| netgear r9000_firmware | v < 1.0.6.46 | 1.0.6.46 |
| netgear rax10_firmware | v < 1.0.5.50 | 1.0.5.50 |
| netgear rax120_firmware | v < 1.2.10.56 | 1.2.10.56 |
| netgear rax36s_firmware | v < 1.0.5.50 | 1.0.5.50 |
| netgear rax70_firmware | v < 1.0.19.172 | 1.0.19.172 |
| netgear rax78_firmware | v < 1.0.19.172 | 1.0.19.172 |
| netgear rbr10_firmware | No range specified | — |
| netgear rbr20_firmware | No range specified | — |
| netgear rbr350_firmware | v < 4.4.2.1 | 4.4.2.1 |
| netgear rbr40_firmware | No range specified | — |
| netgear rbr50_firmware | No range specified | — |
| netgear rbs10_firmware | No range specified | — |
| netgear rbs20_firmware | No range specified | — |
| netgear rbs350_firmware | v < 4.4.2.1 | 4.4.2.1 |
| netgear rbs40_firmware | No range specified | — |
| netgear rbs50_firmware | No range specified | — |
| netgear xr450_firmware | v < 2.3.3.136 | 2.3.3.136 |
| netgear xr500_firmware | v < 2.3.3.136 | 2.3.3.136 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.