What’s Vulnerable › Vulnerabilities

CVE-2026-9214: Insufficient input validation in NETGEAR R7000 router allows administrators to tamper with the device.

• Severity: medium (CVSS 4.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-11 · updated 2026-10-24
• Weakness: CWE-20

Description

Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.

Affected products

• NETGEAR R7000: all versions

References

• https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory
• https://www.netgear.com/support/product/r7000

Get alerted when CVE-2026-9214 or the next vulnerability affects your stack