low3.5
CVE-2026-9216
An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi c…
Impact
An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Rax30 Firmware | before 1.0.9.92 |
| Netgear | Rax35 Firmware | before 1.0.10.72 |
| Netgear | Rax38 Firmware | before 1.0.6.106 |
| Netgear | Rax40 Firmware | before 1.0.6.106 |
| Netgear | Raxe300 Firmware | before 1.0.10.72 |
Weakness classification
References
- NVD record
- CVE.org record
- https://kb.netgear.com/000070912/September-2026-NETGEAR-Security-Advisory
- https://www.netgear.com/support/product/rax30
- https://www.netgear.com/support/product/rax35
- https://www.netgear.com/support/product/rax38
- https://www.netgear.com/support/product/rax40
- https://www.netgear.com/support/product/raxe300