Is CVE-2026-9218 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-9218 being exploited in the wild.

How severe is CVE-2026-9218?

Medium severity, with a CVSS score of 4.5, published 13 October 2026.

Which products and versions are affected?

NETGEAR CBR40 Won't Fix (End-of-Support); NETGEAR R7000 fixed in v1.0.11.130; NETGEAR R7000P fixed in V1.3.3.152; NETGEAR Rax40 fixed in V1.0.3.64.

Is there a fix for CVE-2026-9218?

Yes: fixed in R7000 v1.0.11.130; R7000P V1.3.3.152; RAX40 V1.0.3.64; CBR40 Won't Fix (End-of-Support). Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-9218 attacked?

It is attacked with local access, in a network appliance.

Am I affected by CVE-2026-9218?

Check whether you run NETGEAR CBR40, NETGEAR R7000, NETGEAR R7000P or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-9218: NETGEAR routers insufficient input validation in NTP setting

CVE-2026-9218 · Severity: medium · CVSS 4.5 · Published 2026-10-13

NETGEAR routers allow an attacker with local network access and administrator credentials to execute unauthorized commands through the NTP (Network Time Protocol) configuration. An attacker exploiting this vulnerability could modify router behavior, potentially affecting its integrity and correct operation, though not exposing data or causing outages.

Technologies: NETGEAR R7000, NETGEAR R7000P. Vendors: NETGEAR.

Quick answers

Is CVE-2026-9218 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-9218 being exploited in the wild.
How severe is CVE-2026-9218?: Medium severity, with a CVSS score of 4.5, published 13 October 2026.
Which products and versions are affected?: NETGEAR CBR40 Won't Fix (End-of-Support); NETGEAR R7000 fixed in v1.0.11.130; NETGEAR R7000P fixed in V1.3.3.152; NETGEAR Rax40 fixed in V1.0.3.64.
Is there a fix for CVE-2026-9218?: Yes: fixed in R7000 v1.0.11.130; R7000P V1.3.3.152; RAX40 V1.0.3.64; CBR40 Won't Fix (End-of-Support). Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-9218 attacked?: It is attacked with local access, in a network appliance.
Am I affected by CVE-2026-9218?: Check whether you run NETGEAR CBR40, NETGEAR R7000, NETGEAR R7000P or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: R7000 v1.0.11.130; R7000P V1.3.3.152; RAX40 V1.0.3.64; CBR40 Won't Fix (End-of-Support)

Technical details

An insufficient input validation vulnerability in the NTP time server configuration setting of affected NETGEAR routers allows authenticated local attackers to inject and execute unauthorized commands. The attack requires both network adjacency (local network connection) and possession of router administrator credentials. A successful exploit results in arbitrary command execution with router-level privileges, compromising integrity.

Affected products

NETGEAR CBR40 Won't Fix (End-of-Support)
NETGEAR R7000 fixed in v1.0.11.130
NETGEAR R7000P fixed in V1.3.3.152
NETGEAR RAX40 fixed in V1.0.3.64

Timeline

2026-10-13: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.