CVE-2026-9211

Published: Jun 9, 2026Modified: Jun 18, 2026

5.2

Vector

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:AmberShow less

Source: a2826606-91e7-4eb6-899e-8484bd4575d5 (Secondary)

Description

An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation.

Affected (4)

Products: Netgear: Cax30 Firmware, Rax30 Firmware, Rax5 Firmware, Raxe300 Firmware

4 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Cax30 Firmware	Before 2.2.1.4

Running on/with	Platform Versions
Netgear Cax30	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax30 Firmware	Before 1.0.10.94

Running on/with	Platform Versions
Netgear Rax30	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax5 Firmware	Before 1.0.5.34

Running on/with	Platform Versions
Netgear Rax5	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Raxe300 Firmware	Before 1.0.10.72

Running on/with	Platform Versions
Netgear Raxe300	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.