CVE-2026-9214CWE-20

CVE-2026-9214

Medium · published August 11, 2026

CVSS v3.1
4.5
EPSS
0%
Percentile
13.1
In the wild
Unconfirmed
What it is

Insufficient input validation vulnerability in the NETGEAR R7000 models

allows authenticated administrators connected to the local network to

make unauthorized modification to router software and functionality.

The record
Technical detail
CVSS v3.1
4.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00230 · 13.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-08-11T20:17Z
Affected products (1)
ProductVersionsFixed in
netgear/r7000_firmwareall versions—
References (2)
https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/r7000 · a2826606-91e7-4eb6-899e-8484bd4575d5
EPSS history
Timeline
  • 11 AUG 15:06Z
    Insufficient input validation in NETGEAR R7000 router allows administrators to tamper with the device.
    cvelistv5