Quick answers
- Is CVE-2026-9213 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-9213 being exploited in the wild.
- How severe is CVE-2026-9213?
- Informational severity, with a CVSS score of 6.9, published 9 June 2026.
- Which products and versions are affected?
- NETGEAR MR70; NETGEAR MS70; NETGEAR RAXE500; NETGEAR XR1000.
- Is there a fix for CVE-2026-9213?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-9213 attacked?
- It is attacked over the network, in a network appliance.
- Am I affected by CVE-2026-9213?
- Check whether you run NETGEAR MR70, NETGEAR MS70, NETGEAR RAXE500 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The vulnerability is classified as Improper Input Validation (CWE-20) within the firmware of affected NETGEAR gaming routers. An attacker positioned to perform a Man-in-the-Middle (MitM) attack between the router and the Internet can tamper with network traffic to trigger remote code execution. While the attack requires a high degree of network positioning (intercepting ISP-level or upstream traffic), successful exploitation allows for complete system compromise. Affected models include MR70, MS70, RAXE500, and XR1000. Users are advised to check for firmware updates from the vendor.
Affected products
- NETGEAR MR70
- NETGEAR MS70
- NETGEAR RAXE500
- NETGEAR XR1000
Timeline
- 2026-06-09: disclosed: CVE published by Netgear via NVD