VulnerabilityAnalyzed

CVE-2026-9213

A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamper with traffic between the router and the Internet, to execute code on the device.

MEDIUM 6.9EPSS 0.40%

Does this matter?

Lower severity and a low EPSS score (0.40%). Track it; it rarely justifies an emergency change on its own.

Description

A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamper with traffic between the router and the Internet, to execute code on the device.

CVSS 4.0: 6.9 MEDIUMCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.40% probability · 33th percentile
CISA KEV: Not listed
Weakness: CWE-20
Affected: netgear/mr70 firmware · netgear/ms70 firmware · netgear/raxe500 firmware · netgear/xr1000 firmware
Source: a2826606-91e7-4eb6-899e-8484bd4575d5

References

https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-AdvisoryVendor Advisory
https://www.netgear.com/support/product/mr70/Product
https://www.netgear.com/support/product/ms70/Product
https://www.netgear.com/support/product/raxe500/Product
https://www.netgear.com/support/product/xr1000/Product

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.