Low severity3.5NVD Advisory· Published Sep 8, 2026· Updated Oct 13, 2026

CVE-2026-9216

Description

An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgear/Rax30 Firmware
cpe:2.3:o:netgear:rax30_firmware:*:*:*:*:*:*:*:*
Range: <1.0.9.92
Netgear/Rax35 Firmware
cpe:2.3:o:netgear:rax35_firmware:*:*:*:*:*:*:*:*
Range: <1.0.10.72
Netgear/Rax38 Firmware
cpe:2.3:o:netgear:rax38_firmware:*:*:*:*:*:*:*:*
Range: <1.0.6.106
Netgear/Rax40 Firmware
cpe:2.3:o:netgear:rax40_firmware:*:*:*:*:*:*:*:*
Range: <1.0.6.106
Netgear/Raxe300 Firmware
cpe:2.3:o:netgear:raxe300_firmware:*:*:*:*:*:*:*:*
Range: <1.0.10.72
Netgear/RAX35llm-fuzzy
Netgear/RAX seriesllm-fuzzy
Netgear/RAX30llm-fuzzy

Patches

Vulnerability mechanics

References

kb.netgear.com/000070912/September-2026-NETGEAR-Security-AdvisorynvdVendor Advisory
www.netgear.com/support/product/rax30nvdProduct
www.netgear.com/support/product/rax35nvdProduct
www.netgear.com/support/product/rax38nvdProduct
www.netgear.com/support/product/rax40nvdProduct
www.netgear.com/support/product/raxe300nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.227
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000