Insufficient Input Validation in NETGEAR RAX Series Routers
CVE-2026-9216

1.2LOW

Key Information:

Vendor

Netgear

Status
Vendor
CVE Published:
8 September 2026

What is CVE-2026-9216?

An insufficient input validation issue in select NETGEAR RAX series routers enables a network-adjacent attacker, possessing valid WiFi credentials, to cause a crash in the router's management user interface. While this vulnerability does not affect the confidentiality or integrity of the network, it does result in temporary disruption of access to the management UI, although the core functionality of the router, including WiFi services, remains unaffected.

Affected Version(s)

RAX30 0

RAX35 0

RAX38 0

References

CVSS V4

Score:
1.2
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

mr_mee
.