CVE-2026-9213

A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamper with traffic between the router and the Internet, to execute code on the device.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory	Vendor Advisory
https://www.netgear.com/support/product/mr70/	Product
https://www.netgear.com/support/product/ms70/	Product
https://www.netgear.com/support/product/raxe500/	Product
https://www.netgear.com/support/product/xr1000/	Product

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:netgear:mr70_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:mr70:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:netgear:ms70_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:ms70:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:netgear:raxe500_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:raxe500:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:netgear:xr1000_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:xr1000:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2026-06-09 17:17

Updated : 2026-07-23 08:10

NVD link : CVE-2026-9213

Mitre link : CVE-2026-9213

CVE.ORG link : CVE-2026-9213

JSON object : View

Products Affected

netgear

ms70_firmware
mr70_firmware
ms70
xr1000_firmware
raxe500
xr1000
mr70
raxe500_firmware

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2026-9213", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-9213", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-09T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.2}], "cvssMetricV40": [{"type": "Secondary", "source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.9, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "UNREPORTED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "affectedData": [{"vendor": "NETGEAR", "product": "MR70", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.4.48", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "MS70", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.4.48", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RAXE500", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.2.14.114", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "XR1000", "versions": [{"status": "affected", "version": "0", "lessThan": "V1.0.2.86", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-06-09T17:17:51.733", "references": [{"url": "https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory", "tags": ["Vendor Advisory"], "source": "a2826606-91e7-4eb6-899e-8484bd4575d5"}, {"url": "https://www.netgear.com/support/product/mr70/", "tags": ["Product"], "source": "a2826606-91e7-4eb6-899e-8484bd4575d5"}, {"url": "https://www.netgear.com/support/product/ms70/", "tags": ["Product"], "source": "a2826606-91e7-4eb6-899e-8484bd4575d5"}, {"url": "https://www.netgear.com/support/product/raxe500/", "tags": ["Product"], "source": "a2826606-91e7-4eb6-899e-8484bd4575d5"}, {"url": "https://www.netgear.com/support/product/xr1000/", "tags": ["Product"], "source": "a2826606-91e7-4eb6-899e-8484bd4575d5"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in\u00a0the affected\u00a0NETGEAR gaming routers allows\u00a0attackers with\u00a0the ability to intercept and tamper with traffic between\u00a0the router and the Internet, to execute code on the device."}, {"lang": "es", "value": "Una vulnerabilidad en los routers de juegos NETGEAR afectados permite a los atacantes con la capacidad de interceptar y manipular el tr\u00e1fico entre el router y el Internet, ejecutar c\u00f3digo en el dispositivo."}], "lastModified": "2026-07-23T08:10:00.137", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:netgear:mr70_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "335BE717-7B38-4BDB-8F43-3B62A1059CCE", "versionEndExcluding": "1.0.4.48"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:mr70:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "34070FFE-F407-40FD-AACE-5C96F3055799"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:netgear:ms70_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88C2B2F9-6C25-4CB4-8F94-7EE18EF65D94", "versionEndExcluding": "1.0.4.48"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:ms70:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D8D33A91-19BD-4901-9DDF-A1A06E8E2B53"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:netgear:raxe500_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B75B005E-469A-4AB4-A0F5-D0067D66FFA3", "versionEndExcluding": "1.2.14.114"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:raxe500:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6D23ADF0-05B4-4163-9666-3F470FB19E01"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:netgear:xr1000_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "74735961-DBE3-424F-B147-682E5C478C7F", "versionEndExcluding": "1.0.2.86"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:xr1000:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4FD4ED11-4130-47DA-8A9D-55B8F6E3E213"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "a2826606-91e7-4eb6-899e-8484bd4575d5"}