CVE-2026-9214

Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.

Score

CVSS 3.1 4.5 Medium

Status

Analyzed - a2826606-91e7-4eb6-899e-8484bd4575d5

Published

2026-08-11

Last modified

2026-10-24

Weaknesses

CWE-20

Affected products

• R7000 (Netgear)
• R7000 Firmware (Netgear)

References

• https://www.netgear.com/support/product/r7000
• https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory