# CVE-2026-9211: Netgear Multiple Routers improper input validation

Source: https://junglewise.ai/threats/cve-2026-9211-netgear-multiple-routers-improper-input-validation  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-09. Updated: 2026-06-09  
License: CC BY 4.0 with a link back

CVE-2026-9211 · Severity: info · CVSS 5.2 · Published 2026-06-09

A security vulnerability in several Netgear router models allows an unauthorized person on the same local network to take full control of the device. This could allow an attacker to monitor internet traffic, redirect users to malicious websites, or disable the network entirely. The issue affects home and small office routers used for internet connectivity and local networking.

Technologies: [NETGEAR RAX30](https://junglewise.ai/threats/technologies/rax30), [NETGEAR RAX50](https://junglewise.ai/threats/technologies/rax50), [NETGEAR RAXE300](https://junglewise.ai/threats/technologies/raxe300). Vendors: [NETGEAR](https://junglewise.ai/threats/vendors/netgear).

## Quick answers

**Is CVE-2026-9211 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-9211 being exploited in the wild.

**How severe is CVE-2026-9211?** Informational severity, with a CVSS score of 5.2, published 9 June 2026.

**Which products and versions are affected?** Netgear CAX30; Netgear RAX30; Netgear RAX5; Netgear RAXE300.

**Is there a fix for CVE-2026-9211?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-9211 attacked?** It is attacked from the adjacent network, in a network appliance.

**Am I affected by CVE-2026-9211?** Check whether you run NETGEAR CAX30, NETGEAR RAX30, NETGEAR RAX50 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A vulnerability classified as Improper Input Validation (CWE-20) exists in multiple Netgear router models, including CAX30, RAX30, RAX5, and RAXE300. An unauthenticated attacker located on the same local network (adjacent) can exploit this flaw to gain administrative control over the device. Successful exploitation allows for unauthorized configuration changes and full compromise of the router's operation. The vulnerability is triggered without user interaction, though it requires specific network conditions (AT:P). Netgear has acknowledged the issue, and users are advised to check for firmware updates for the affected models.

## Affected products

- Netgear CAX30
- Netgear RAX30
- Netgear RAX5
- Netgear RAXE300

## Timeline

- 2026-06-09: disclosed: CVE published by Netgear via NVD

## References

- [https://www.netgear.com/support/product/cax30/](https://www.netgear.com/support/product/cax30/)
- [https://www.netgear.com/support/product/rax30/](https://www.netgear.com/support/product/rax30/)
- [https://www.netgear.com/support/product/rax5/](https://www.netgear.com/support/product/rax5/)
- [https://www.netgear.com/support/product/raxe300/](https://www.netgear.com/support/product/raxe300/)

## Related threats

- [NETGEAR RAX/CAX router insufficient input validation in Block Sites](https://junglewise.ai/threats/cve-2026-11732-an-insufficient-input-validation-vulnerability-in-the-website)
- [NETGEAR RAX series authentication bypass in management service](https://junglewise.ai/threats/cve-2026-11731-an-authentication-bypass-vulnerability-in-the-listed-netgear-rax)
- [NETGEAR RAX series insufficient input validation in management UI](https://junglewise.ai/threats/cve-2026-9216-netgear-rax-series-insufficient-input-validation-in-management-ui)
- [NETGEAR Nighthawk and Orbi routers command injection vulnerability](https://junglewise.ai/threats/cve-2026-11814-netgear-nighthawk-and-orbi-routers-command-injection)
- [A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker…](https://junglewise.ai/threats/cve-2026-11739-a-command-injection-vulnerability-in-certain-affected-netgear)