CVE-2026-9213: Insufficient input validation in certain NETGEAR routers

Published Jun 9, 2026
·
Updated

A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamper with traffic between the router and the Internet, to execute code on the device.

Affected Software

9 affected components
Netgear NETGEAR gaming routers
All of the following
Netgear Mr70 Firmware<1.0.4.48
Netgear Mr70
All of the following
Netgear Ms70 Firmware<1.0.4.48
Netgear Ms70
All of the following
Netgear Raxe500 Firmware<1.2.14.114
Netgear RAXE500
All of the following
Netgear Xr1000 Firmware<1.0.2.86
Netgear XR1000

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade NETGEAR MR70 Nighthawk Mesh WiFi 6 Router to a version that resolves this vulnerability.

    Fixed in V1.0.4.48
  2. Upgrade

    Upgrade NETGEAR MS70 Nighthawk Mesh WiFi 6 Add-on Satellite to a version that resolves this vulnerability.

    Fixed in V1.0.4.48
  3. Upgrade

    Upgrade NETGEAR RAXE500 Nighthawk AX12 12-Stream AXE11000 Tri-Band WiFi 6E Router to a version that resolves this vulnerability.

    Fixed in V1.2.14.114
  4. Upgrade

    Upgrade NETGEAR XR1000 Nighthawk WiFi 6 Pro Gaming Router to a version that resolves this vulnerability.

    Fixed in V1.0.2.86

Event History

Jun 9, 2026
CVE Published
via MITRE·03:50 PM
Data Sourced
via MITRE·03:50 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeaknessAffected Software
Nov 5, 58514
Event
via FIRST·11:17 PM
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-9213?

The severity of CVE-2026-9213 is medium with a CVSS score of 6.9.

2

How do I fix CVE-2026-9213?

To fix CVE-2026-9213, ensure your NETGEAR router firmware is updated to the latest version.

3

What devices are affected by CVE-2026-9213?

CVE-2026-9213 affects certain NETGEAR gaming routers, particularly the Nighthawk series.

4

What kind of vulnerability is CVE-2026-9213?

CVE-2026-9213 is classified as an insufficient input validation vulnerability.

5

Can CVE-2026-9213 be exploited remotely?

Yes, CVE-2026-9213 can be exploited remotely by attackers intercepting and tampering with traffic.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203