CVE-2026-9212 MEDIUM

CVE-2026-9212: Insufficient authentication and input validation in certain NETGEAR products

Vendor Netgear
Product LBR1020
Weakness CWE-306 · Missing auth
Published June 9, 2026
Last update June 11, 2026
View on NVD All CVEs

CVSS base score

5.6/10
Attack vector Adjacent
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/E:U

What the vulnerability does

01Description

Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.

Key dates

02Disclosure timeline

June 9, 2026 CVE published
June 11, 2026 Record updated