Insufficient Input Validation in NETGEAR Routers
CVE-2026-9218

4.3MEDIUM

Key Information:

Vendor

Netgear

Status
Vendor
CVE Published:
13 October 2026

What is CVE-2026-9218?

An insufficient input validation vulnerability exists in the NTP setting of specific NETGEAR router models. An attacker with access to the local network and valid administrator credentials can exploit this flaw to execute unauthorized commands on the router. While the integrity of the affected devices may be compromised, the confidentiality and availability remain unaffected. This emphasizes the importance of securing access to router administrator interfaces to prevent potential exploitation.

Affected Version(s)

CBR40 0

R7000 0

R7000P 0

References

CVSS V4

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

unprovable
.