Quick answers
- Is CVE-2026-9211 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-9211 being exploited in the wild.
- How severe is CVE-2026-9211?
- Informational severity, with a CVSS score of 5.2, published 9 June 2026.
- Which products and versions are affected?
- Netgear CAX30; Netgear RAX30; Netgear RAX5; Netgear RAXE300.
- Is there a fix for CVE-2026-9211?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-9211 attacked?
- It is attacked from the adjacent network, in a network appliance.
- Am I affected by CVE-2026-9211?
- Check whether you run NETGEAR CAX30, NETGEAR RAX30, NETGEAR RAX50 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A vulnerability classified as Improper Input Validation (CWE-20) exists in multiple Netgear router models, including CAX30, RAX30, RAX5, and RAXE300. An unauthenticated attacker located on the same local network (adjacent) can exploit this flaw to gain administrative control over the device. Successful exploitation allows for unauthorized configuration changes and full compromise of the router's operation. The vulnerability is triggered without user interaction, though it requires specific network conditions (AT:P). Netgear has acknowledged the issue, and users are advised to check for firmware updates for the affected models.
Affected products
- Netgear CAX30
- Netgear RAX30
- Netgear RAX5
- Netgear RAXE300
Timeline
- 2026-06-09: disclosed: CVE published by Netgear via NVD