CVE-2026-9216
An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.
- Score
- CVSS 3.1 3.5 Low
- Status
- Analyzed - a2826606-91e7-4eb6-899e-8484bd4575d5
- Published
- 2026-09-08
- Last modified
- 2026-10-13
- Weaknesses
- CWE-121
Affected products
- Rax30 (Netgear)
- Rax30 Firmware (Netgear)
- Rax35 (Netgear)
- Rax35 Firmware (Netgear)
- Rax38 (Netgear)
- Rax38 Firmware (Netgear)
- Rax40 (Netgear)
- Rax40 Firmware (Netgear)
- Raxe300 (Netgear)
- Raxe300 Firmware (Netgear)
References
- https://www.netgear.com/support/product/rax30
- https://www.netgear.com/support/product/rax35
- https://www.netgear.com/support/product/rax38
- https://www.netgear.com/support/product/rax40
- https://www.netgear.com/support/product/raxe300
- https://kb.netgear.com/000070912/September-2026-NETGEAR-Security-Advisory
