SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityAnalyzed

CVE-2026-9211

An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation.

MEDIUM 5.2EPSS 0.24%

Does this matter?

Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own.

Description

An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation.

CVSS 4.0
5.2 MEDIUMCVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS
0.24% probability · 14th percentile
CISA KEV
Not listed
Weakness
CWE-20
Affected
netgear/cax30 firmware · netgear/rax30 firmware · netgear/rax5 firmware · netgear/raxe300 firmware
Source
a2826606-91e7-4eb6-899e-8484bd4575d5

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.