Vulnerability Details CVE-2026-9216
An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 13.9%
CVSS Severity
CVSS v3 Score 3.5
References
- https://kb.netgear.com/000070912/September-2026-NETGEAR-Security-Advisory
- https://www.netgear.com/support/product/rax30
- https://www.netgear.com/support/product/rax35
- https://www.netgear.com/support/product/rax38
- https://www.netgear.com/support/product/rax40
- https://www.netgear.com/support/product/raxe300
Products affected by CVE-2026-9216
-
cpe:2.3:h:netgear:rax30:-
-
cpe:2.3:h:netgear:rax35:-
-
cpe:2.3:h:netgear:rax38:-
-
cpe:2.3:h:netgear:rax40:-
-
cpe:2.3:h:netgear:raxe300:-
-
cpe:2.3:o:netgear:rax30_firmware:-
-
cpe:2.3:o:netgear:rax30_firmware:1.0.3.64
-
cpe:2.3:o:netgear:rax30_firmware:1.0.4.66
-
cpe:2.3:o:netgear:rax30_firmware:1.0.5.70
-
cpe:2.3:o:netgear:rax30_firmware:1.0.6.74
-
cpe:2.3:o:netgear:rax30_firmware:1.0.7.78
-
cpe:2.3:o:netgear:rax30_firmware:1.0.9.90
-
cpe:2.3:o:netgear:rax35_firmware:-
-
cpe:2.3:o:netgear:rax35_firmware:1.0.3.62
-
cpe:2.3:o:netgear:rax35_firmware:1.0.3.80
-
cpe:2.3:o:netgear:rax35_firmware:1.0.3.94
-
cpe:2.3:o:netgear:rax35_firmware:1.0.4.102
-
cpe:2.3:o:netgear:rax35_firmware:1.0.6.106
-
cpe:2.3:o:netgear:rax38_firmware:-
-
cpe:2.3:o:netgear:rax38_firmware:1.0.3.94
-
cpe:2.3:o:netgear:rax38_firmware:1.0.4.102
-
cpe:2.3:o:netgear:rax40_firmware:-
-
cpe:2.3:o:netgear:rax40_firmware:1.0.3.62
-
cpe:2.3:o:netgear:rax40_firmware:1.0.3.64
-
cpe:2.3:o:netgear:rax40_firmware:1.0.3.80
-
cpe:2.3:o:netgear:rax40_firmware:1.0.3.94
-
cpe:2.3:o:netgear:rax40_firmware:1.0.4.102
-
cpe:2.3:o:netgear:raxe300_firmware:-
-
cpe:2.3:o:netgear:raxe300_firmware:1.0.5.56
-
cpe:2.3:o:netgear:raxe300_firmware:1.0.7.62
-
cpe:2.3:o:netgear:raxe300_firmware:1.0.8.64
-
cpe:2.3:o:netgear:raxe300_firmware:1.0.9.82