4.3Medium
CVE-2026-9214Insufficient input validation in NETGEAR R7000 router allows administrators to tamper with the device.
Description
Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
Weakness (CWE):
CWE-20
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| NETGEAR | R7000 | V1.0.12.216 | |
| netgear | r7000 firmware | — |
References and patches
- https://www.netgear.com/support/product/r7000 productProduct
- https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory vendor-advisorypatchVendor Advisory
CPE matches (NVD) (1)
cpe:2.3:o:netgear:r7000_firmware:-:*:*:*:*:*:*:*