MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2026-9212

CVSS 5.6v4.0pub. 2026-06-09upd. 2026-06-18

Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.

CVSS Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Netgear Lbr1020

    HW
    Netgear
    all versions

  • Netgear Lbr1020 Firmware

    OS
    Netgear
    < 2.6.4.60

  • Netgear Lbr20

    HW
    Netgear
    all versions

  • Netgear Lbr20 Firmware

    OS
    Netgear
    < 2.7.6.8

  • Netgear R6700ax

    HW
    Netgear
    all versions

  • Netgear R6700ax Firmware

    OS
    Netgear
    all versions

  • Netgear R7800

    HW
    Netgear
    all versions

  • Netgear R7800 Firmware

    OS
    Netgear
    < 1.0.4.96

  • Netgear R9000

    HW
    Netgear
    all versions

  • Netgear R9000 Firmware

    OS
    Netgear
    < 1.0.6.46

  • Netgear Rax10

    HW
    Netgear
    all versions

  • Netgear Rax10 Firmware

    OS
    Netgear
    < 1.0.5.50

  • Netgear Rax120

    HW
    Netgear
    1.02.0

  • Netgear Rax120 Firmware

    OS
    Netgear
    < 1.2.10.56

  • Netgear Rax36s

    HW
    Netgear
    all versions

  • Netgear Rax36s Firmware

    OS
    Netgear
    < 1.0.5.50

  • Netgear Rax70

    HW
    Netgear
    all versions

  • Netgear Rax70 Firmware

    OS
    Netgear
    < 1.0.19.172

  • Netgear Rax78

    HW
    Netgear
    all versions

  • Netgear Rax78 Firmware

    OS
    Netgear
    < 1.0.19.172

  • Netgear Rbr10

    HW
    Netgear
    all versions

  • Netgear Rbr10 Firmware

    OS
    Netgear
    all versions

  • Netgear Rbr20

    HW
    Netgear
    all versions

  • Netgear Rbr20 Firmware

    OS
    Netgear
    all versions

  • Netgear Rbr350

    HW
    Netgear
    all versions

  • Netgear Rbr350 Firmware

    OS
    Netgear
    < 4.4.2.1

  • Netgear Rbr40

    HW
    Netgear
    all versions

  • Netgear Rbr40 Firmware

    OS
    Netgear
    all versions

  • Netgear Rbr50

    HW
    Netgear
    all versions

  • Netgear Rbr50 Firmware

    OS
    Netgear
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2021-45626CRITICAL9.6PL ✓same product

Command injection bez uwierzytelnienia w urządzeniach NETGEAR Orbi

CVE-2021-45618CRITICAL9.6PL ✓same product

NETGEAR — unauthenticated command injection w routerach i extenderach

CVE-2021-45520CRITICAL9.6PL ✓same product

NETGEAR RBK352/RBR350/RBS350 — zakodowane hasło (hardcoded password)

CVE-2021-45619CRITICAL9.6PL ✓same product

NETGEAR — command injection bez uwierzytelnienia w routerach i extenderach

CVE-2021-45652CRITICAL9.6PL ✓same product

Ujawnienie wrażliwych informacji w urządzeniach NETGEAR RBK352/RBR350/RBS350