BaselineWatch
Desk

CVE-2026-9216

1.2 low SSVC exploitation: none Analyzed

An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 1.2 · netgearNVD modified 2026-10-13 17:17

Affected (CPE criteria) 5

  • cpe:2.3:o:netgear:rax30_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:netgear:rax35_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:netgear:rax38_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:netgear:rax40_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:netgear:raxe300_firmware:*:*:*:*:*:*:*:*

References 6