PT-2026-47859 · NetGear · Lbr1020+24

Zerozenx Labs · Published 2026-06-09 · Updated 2026-06-09 · CVE-2026-9212

Mitre

CVSS v4.0

5.6

Medium

Base vector

AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/E:U

Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting product's confidentiality or change certain configurations.

Fix

RCE

Missing Authentication

Weakness Enumeration

CWE-20

CWE-306

Related Identifiers

CVE-2026-9212

Affected Products

Lbr1020

Lbr20

R6700Ax

R7800

R9000

Rax10

Rax10V2

Rax120

Rax120V1

Rax120V2

Rax36S

Rax70

Rax78

Rbr10

Rbr20

Rbr350

Rbr40

Rbr50

Rbs10

Rbs20

Rbs350

Rbs40

Rbs50

Xr450

Xr500

References · 24

• https://netgear.com/support/product/rbr10 · Patch
• https://netgear.com/support/product/rax36s · Patch
• https://netgear.com/support/product/r6700ax · Patch
• https://netgear.com/support/product/rbs20 · Patch
• https://netgear.com/support/product/rbs40 · Patch
• https://netgear.com/support/product/rax120 · Patch
• https://netgear.com/support/product/rax78 · Patch
• https://netgear.com/support/product/xr450 · Patch
• https://netgear.com/support/product/rbs350 · Patch
• https://netgear.com/support/product/r7800 · Patch
• https://netgear.com/support/product/rbr50 · Patch
• https://netgear.com/support/product/xr500 · Patch
• https://netgear.com/support/product/rbs50 · Patch
• https://netgear.com/support/product/lbr1020 · Patch
• https://netgear.com/support/product/r9000 · Patch