# CVE-2026-9216: NETGEAR RAX series insufficient input validation in management UI

Source: https://junglewise.ai/threats/cve-2026-9216-netgear-rax-series-insufficient-input-validation-in-management-ui  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-08. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-9216 · Severity: low · CVSS 3.5 · Published 2026-09-08

NETGEAR RAX series routers contain a vulnerability in their management interface that allows anyone with WiFi access to crash the admin UI. While this disrupts remote management of the router, the core WiFi network and internet connectivity remain unaffected, and no data breach or configuration tampering is possible.

Technologies: [NETGEAR RAX30](https://junglewise.ai/threats/technologies/rax30), [NETGEAR Rax30 Firmware](https://junglewise.ai/threats/technologies/rax30-firmware), [NETGEAR RAXE300](https://junglewise.ai/threats/technologies/raxe300). Vendors: [NETGEAR](https://junglewise.ai/threats/vendors/netgear).

## Quick answers

**Is CVE-2026-9216 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-9216 being exploited in the wild.

**How severe is CVE-2026-9216?** Low severity, with a CVSS score of 3.5, published 8 September 2026.

**Which products and versions are affected?** NETGEAR RAX30 before V1.0.9.92; NETGEAR Rax35 before V1.0.10.72; NETGEAR Rax38 before V1.0.6.106; NETGEAR Rax40 before V1.0.6.106; and 1 more.

**Is there a fix for CVE-2026-9216?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-9216 attacked?** It is attacked over the network or from the adjacent network, in a network appliance.

**Am I affected by CVE-2026-9216?** Check whether you run NETGEAR RAX30, NETGEAR Rax30 Firmware, NETGEAR Rax35 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is an insufficient input validation flaw in NETGEAR RAX series router management interfaces. An attacker with network-adjacent access (WiFi credentials) can craft malicious input that crashes the management UI without requiring authentication. The attack is limited to denial of service of the management interface; core router services and WiFi availability are not impacted. Patches are available in fixed firmware versions for all affected models: RAX30 (V1.0.9.92), RAX35 (V1.0.10.72), RAX38 (V1.0.6.106), RAX40 (V1.0.6.106), and RAXE300 (V1.0.10.72).

## Affected products

- NETGEAR RAX30 before V1.0.9.92
- NETGEAR RAX35 before V1.0.10.72
- NETGEAR RAX38 before V1.0.6.106
- NETGEAR RAX40 before V1.0.6.106
- NETGEAR RAXE300 before V1.0.10.72

## Timeline

- 2026-09-08: disclosed

## References

- [https://kb.netgear.com/000070912/September-2026-NETGEAR-Security-Advisory](https://kb.netgear.com/000070912/September-2026-NETGEAR-Security-Advisory)
- [https://www.netgear.com/support/product/rax30](https://www.netgear.com/support/product/rax30)

## Related threats

- [NETGEAR routers insufficient input validation in NTP setting](https://junglewise.ai/threats/cve-2026-9218-insufficient-input-validation-vulnerability-in-time-server-ntp)
- [NETGEAR RAX/CAX router insufficient input validation in Block Sites](https://junglewise.ai/threats/cve-2026-11732-an-insufficient-input-validation-vulnerability-in-the-website)
- [NETGEAR RAX series authentication bypass in management service](https://junglewise.ai/threats/cve-2026-11731-an-authentication-bypass-vulnerability-in-the-listed-netgear-rax)
- [NETGEAR Nighthawk and Orbi routers command injection vulnerability](https://junglewise.ai/threats/cve-2026-11814-netgear-nighthawk-and-orbi-routers-command-injection)
- [A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker…](https://junglewise.ai/threats/cve-2026-11739-a-command-injection-vulnerability-in-certain-affected-netgear)