{"id":"CVE-2026-9214","title":"Insufficient input validation vulnerability in the NETGEAR R7000 models\n allows authenticated administrators connected to the local network to \nmake unauthorized modification to router software and functionality.","summary":"Insufficient input validation vulnerability in the NETGEAR R7000 models\n allows authenticated administrators connected to the local network to \nmake unauthorized modification to router software and functionality.","severity":"medium","cvss":4.5,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-20"],"vendor":"netgear","product":"r7000_firmware","affected":["r7000_firmware"],"published":"2026-08-11","updated":"2026-09-09","sourceUpdated":"2026-09-09T02:59:29.410","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-9214","references":[{"url":"https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory","label":"a2826606-91e7-4eb6-899e-8484bd4575d5"},{"url":"https://www.netgear.com/support/product/r7000","label":"a2826606-91e7-4eb6-899e-8484bd4575d5"}],"tags":["nvd"],"epss":0.00153,"epssPercentile":0.04799,"ingestedAt":"2026-08-29T19:41:14.722Z","slug":"CVE-2026-9214","body":"## Overview\n\nInsufficient input validation vulnerability in the NETGEAR R7000 models\n allows authenticated administrators connected to the local network to \nmake unauthorized modification to router software and functionality.\n\n## Affected\n\n- `r7000_firmware`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":25,"depthScoreParts":{"impact":24.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202635,"id":"CVE-2026-9214","ts":1789400099490,"field":"cvss","old":null,"new":"4.5"},{"seq":202634,"id":"CVE-2026-9214","ts":1789400099490,"field":"severity","old":"none","new":"medium"},{"seq":201362,"id":"CVE-2026-9214","ts":1789397621347,"field":"cvss","old":"4.5","new":null},{"seq":201361,"id":"CVE-2026-9214","ts":1789397621347,"field":"severity","old":"medium","new":"none"},{"seq":200055,"id":"CVE-2026-9214","ts":1789395587672,"field":"cvss","old":null,"new":"4.5"},{"seq":200054,"id":"CVE-2026-9214","ts":1789395587672,"field":"severity","old":"none","new":"medium"},{"seq":199292,"id":"CVE-2026-9214","ts":1789392261367,"field":"cvss","old":"4.5","new":null},{"seq":199291,"id":"CVE-2026-9214","ts":1789392261367,"field":"severity","old":"medium","new":"none"},{"seq":197625,"id":"CVE-2026-9214","ts":1789384304267,"field":"cvss","old":null,"new":"4.5"},{"seq":197624,"id":"CVE-2026-9214","ts":1789384304267,"field":"severity","old":"none","new":"medium"},{"seq":196899,"id":"CVE-2026-9214","ts":1789383784245,"field":"cvss","old":"4.5","new":null},{"seq":196898,"id":"CVE-2026-9214","ts":1789383784245,"field":"severity","old":"medium","new":"none"},{"seq":195803,"id":"CVE-2026-9214","ts":1789380595095,"field":"cvss","old":null,"new":"4.5"},{"seq":195802,"id":"CVE-2026-9214","ts":1789380595095,"field":"severity","old":"none","new":"medium"},{"seq":194754,"id":"CVE-2026-9214","ts":1789378790526,"field":"cvss","old":"4.5","new":null},{"seq":194753,"id":"CVE-2026-9214","ts":1789378790526,"field":"severity","old":"medium","new":"none"},{"seq":193541,"id":"CVE-2026-9214","ts":1789376545698,"field":"cvss","old":null,"new":"4.5"},{"seq":193540,"id":"CVE-2026-9214","ts":1789376545698,"field":"severity","old":"none","new":"medium"},{"seq":192328,"id":"CVE-2026-9214","ts":1789373640354,"field":"cvss","old":"4.5","new":null},{"seq":192327,"id":"CVE-2026-9214","ts":1789373640354,"field":"severity","old":"medium","new":"none"},{"seq":191113,"id":"CVE-2026-9214","ts":1789369511375,"field":"cvss","old":null,"new":"4.5"},{"seq":191112,"id":"CVE-2026-9214","ts":1789369511375,"field":"severity","old":"none","new":"medium"},{"seq":189900,"id":"CVE-2026-9214","ts":1789368461905,"field":"cvss","old":"4.5","new":null},{"seq":189899,"id":"CVE-2026-9214","ts":1789368461905,"field":"severity","old":"medium","new":"none"},{"seq":188683,"id":"CVE-2026-9214","ts":1789365245312,"field":"cvss","old":null,"new":"4.5"},{"seq":188682,"id":"CVE-2026-9214","ts":1789365245312,"field":"severity","old":"none","new":"medium"},{"seq":187470,"id":"CVE-2026-9214","ts":1789363481223,"field":"cvss","old":"4.5","new":null},{"seq":187469,"id":"CVE-2026-9214","ts":1789363481223,"field":"severity","old":"medium","new":"none"},{"seq":186256,"id":"CVE-2026-9214","ts":1789361249248,"field":"cvss","old":null,"new":"4.5"},{"seq":186255,"id":"CVE-2026-9214","ts":1789361249248,"field":"severity","old":"none","new":"medium"},{"seq":185043,"id":"CVE-2026-9214","ts":1789358395719,"field":"cvss","old":"4.5","new":null},{"seq":185042,"id":"CVE-2026-9214","ts":1789358395719,"field":"severity","old":"medium","new":"none"},{"seq":183292,"id":"CVE-2026-9214","ts":1789354333583,"field":"cvss","old":null,"new":"4.5"},{"seq":183291,"id":"CVE-2026-9214","ts":1789354333583,"field":"severity","old":"none","new":"medium"},{"seq":182085,"id":"CVE-2026-9214","ts":1789353336213,"field":"cvss","old":"4.5","new":null},{"seq":182084,"id":"CVE-2026-9214","ts":1789353336213,"field":"severity","old":"medium","new":"none"},{"seq":180878,"id":"CVE-2026-9214","ts":1789350306850,"field":"cvss","old":null,"new":"4.5"},{"seq":180877,"id":"CVE-2026-9214","ts":1789350306850,"field":"severity","old":"none","new":"medium"},{"seq":179671,"id":"CVE-2026-9214","ts":1789348309562,"field":"cvss","old":"4.5","new":null},{"seq":179670,"id":"CVE-2026-9214","ts":1789348309562,"field":"severity","old":"medium","new":"none"},{"seq":178464,"id":"CVE-2026-9214","ts":1789346386535,"field":"cvss","old":null,"new":"4.5"},{"seq":178463,"id":"CVE-2026-9214","ts":1789346386535,"field":"severity","old":"none","new":"medium"},{"seq":177257,"id":"CVE-2026-9214","ts":1789343189528,"field":"cvss","old":"4.5","new":null},{"seq":177256,"id":"CVE-2026-9214","ts":1789343189528,"field":"severity","old":"medium","new":"none"},{"seq":175374,"id":"CVE-2026-9214","ts":1789334899056,"field":"cvss","old":null,"new":"4.5"},{"seq":175373,"id":"CVE-2026-9214","ts":1789334899056,"field":"severity","old":"none","new":"medium"},{"seq":174169,"id":"CVE-2026-9214","ts":1789333714162,"field":"cvss","old":"4.5","new":null},{"seq":174168,"id":"CVE-2026-9214","ts":1789333714162,"field":"severity","old":"medium","new":"none"},{"seq":172983,"id":"CVE-2026-9214","ts":1789331108453,"field":"cvss","old":null,"new":"4.5"},{"seq":172982,"id":"CVE-2026-9214","ts":1789331108453,"field":"severity","old":"none","new":"medium"}]}