CVE-2026-9211

HIGH WAF: Medium
CVSS 8.8 Published: 2026-06-09
CWE-20

An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation.

WAF Coverage Analysis

Improper Input Validation Medium WAF Coverage

OWASP: A03:2021 Injection

920xxx - Protocol Enforcement 941xxx - XSS / XXE 942xxx - SQL Injection

Affected Software

VendorProductVersion
netgearcax30_firmwareup to 2.2.1.4
netgearrax30_firmwareup to 1.0.10.94
netgearrax5_firmwareup to 1.0.5.34
netgearraxe300_firmwareup to 1.0.10.72

References

Back to CVE Database