Details of VAR-202606-1905

ID

VAR-202606-1905

CVE

CVE-2026-9212

TITLE

of netgear LBR1020 Multiple vulnerabilities in multiple products, including firmware

Trust: 0.8

sources: JVNDB: JVNDB-2026-020210

DESCRIPTION

Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations. - All information handled by the software may be overwritten. - The software may completely shut down

Trust: 1.62

sources: NVD: CVE-2026-9212 // JVNDB: JVNDB-2026-020210

AFFECTED PRODUCTS

vendor:	netgear	model:	rbr40	scope:	eq	version:	-	Trust: 1.0
vendor:	netgear	model:	r6700ax	scope:	eq	version:	-	Trust: 1.0
vendor:	netgear	model:	lbr1020	scope:	lt	version:	2.6.4.60	Trust: 1.0
vendor:	netgear	model:	rbr50	scope:	eq	version:	-	Trust: 1.0
vendor:	netgear	model:	xr450	scope:	lt	version:	2.3.3.136	Trust: 1.0
vendor:	netgear	model:	lbr20	scope:	lt	version:	2.7.6.8	Trust: 1.0
vendor:	netgear	model:	rax36s	scope:	lt	version:	1.0.5.50	Trust: 1.0
vendor:	netgear	model:	xr500	scope:	lt	version:	2.3.3.136	Trust: 1.0
vendor:	netgear	model:	rbs350	scope:	lt	version:	4.4.2.1	Trust: 1.0
vendor:	netgear	model:	rbs10	scope:	eq	version:	-	Trust: 1.0
vendor:	netgear	model:	r9000	scope:	lt	version:	1.0.6.46	Trust: 1.0
vendor:	netgear	model:	rbr20	scope:	eq	version:	-	Trust: 1.0
vendor:	netgear	model:	rax10	scope:	lt	version:	1.0.5.50	Trust: 1.0
vendor:	netgear	model:	rax120	scope:	lt	version:	1.2.10.56	Trust: 1.0
vendor:	netgear	model:	rbr10	scope:	eq	version:	-	Trust: 1.0
vendor:	netgear	model:	rbr350	scope:	lt	version:	4.4.2.1	Trust: 1.0
vendor:	netgear	model:	rbs40	scope:	eq	version:	-	Trust: 1.0
vendor:	netgear	model:	rax70	scope:	lt	version:	1.0.19.172	Trust: 1.0
vendor:	netgear	model:	rbs50	scope:	eq	version:	-	Trust: 1.0
vendor:	netgear	model:	rbs20	scope:	eq	version:	-	Trust: 1.0
vendor:	netgear	model:	r7800	scope:	lt	version:	1.0.4.96	Trust: 1.0
vendor:	netgear	model:	rax78	scope:	lt	version:	1.0.19.172	Trust: 1.0
vendor:	ネットギア	model:	rbr50	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	r6700ax	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	r7800	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbs20	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	xr450	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbs50	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbs350	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbr40	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbr350	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	lbr1020	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rax36s	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rax120	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbs10	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbr20	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	lbr20	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rax78	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbr10	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	r9000	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rax70	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rax10	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	xr500	scope:	-	version:	-	Trust: 0.8
vendor:	ネットギア	model:	rbs40	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2026-020210 // NVD: CVE-2026-9212

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2026-9212
value:	HIGH
Trust: 1.0
a2826606-91e7-4eb6-899e-8484bd4575d5:	CVE-2026-9212
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2026-9212
value:	HIGH
Trust: 0.8

nvd@nist.gov:	CVE-2026-9212
baseSeverity:	HIGH
baseScore:	8.0
vectorString:	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	ADJACENT
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.1
impactScore:	5.9
version:	3.1
Trust: 1.0
NVD:	CVE-2026-9212
baseSeverity:	HIGH
baseScore:	8.0
vectorString:	CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	ADJACENT NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2026-020210 // NVD: CVE-2026-9212 // NVD: CVE-2026-9212

PROBLEMTYPE DATA

problemtype:	CWE-306	Trust: 1.0
problemtype:	CWE-20	Trust: 1.0
problemtype:	Inappropriate input confirmation (CWE-20) [ others ]	Trust: 0.8
problemtype:	Lack of authentication for critical features (CWE-306) [ others ]	Trust: 0.8

sources: JVNDB: JVNDB-2026-020210 // NVD: CVE-2026-9212

PATCH

title:

June 2026 NETGEAR Security Advisory - NETGEAR Support

url:

https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory

Trust: 0.8

sources: JVNDB: JVNDB-2026-020210

EXTERNAL IDS

db:	NVD	id:	CVE-2026-9212	Trust: 2.6
db:	JVNDB	id:	JVNDB-2026-020210	Trust: 0.8

sources: JVNDB: JVNDB-2026-020210 // NVD: CVE-2026-9212

REFERENCES

url:	https://www.netgear.com/support/product/rbr20/	Trust: 1.8
url:	https://www.netgear.com/support/product/rax120v2/	Trust: 1.8
url:	https://www.netgear.com/support/product/r9000/	Trust: 1.8
url:	https://www.netgear.com/support/product/rbs50/	Trust: 1.8
url:	https://www.netgear.com/support/product/r6700ax/	Trust: 1.8
url:	https://www.netgear.com/support/product/rax78/	Trust: 1.8
url:	https://www.netgear.com/support/product/rax70/	Trust: 1.8
url:	https://www.netgear.com/support/product/lbr1020/	Trust: 1.8
url:	https://www.netgear.com/support/product/rax10/	Trust: 1.8
url:	https://www.netgear.com/support/product/rbr40/	Trust: 1.8
url:	https://www.netgear.com/support/product/rbs10/	Trust: 1.8
url:	https://www.netgear.com/support/product/rbs350/	Trust: 1.8
url:	https://www.netgear.com/support/product/rax36s/	Trust: 1.8
url:	https://www.netgear.com/support/product/rbr350/	Trust: 1.8
url:	https://www.netgear.com/support/product/rbs40/	Trust: 1.8
url:	https://www.netgear.com/support/product/lbr20/	Trust: 1.8
url:	https://www.netgear.com/support/product/rbr10/	Trust: 1.8
url:	https://www.netgear.com/support/product/xr500/	Trust: 1.8
url:	https://www.netgear.com/support/product/r7800/	Trust: 1.8
url:	https://www.netgear.com/support/product/rbr50/	Trust: 1.8
url:	https://www.netgear.com/support/product/xr450/	Trust: 1.8
url:	https://www.netgear.com/support/product/rax120/	Trust: 1.8
url:	https://www.netgear.com/support/product/rbs20/	Trust: 1.8
url:	https://kb.netgear.com/000070811/june-2026-netgear-security-advisory	Trust: 1.0
url:	https://nvd.nist.gov/vuln/detail/cve-2026-9212	Trust: 0.8

sources: JVNDB: JVNDB-2026-020210 // NVD: CVE-2026-9212

SOURCES

db:	JVNDB	id:	JVNDB-2026-020210
db:	NVD	id:	CVE-2026-9212

LAST UPDATE DATE

2026-07-24T23:04:46.117000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2026-020210	date:	2026-06-22T02:32:00
db:	NVD	id:	CVE-2026-9212	date:	2026-07-23T08:10:00.137

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2026-020210	date:	2026-06-22T00:00:00
db:	NVD	id:	CVE-2026-9212	date:	2026-06-09T17:17:51.517