Medium · 6.9 CVE-2026-9213 EUVD-2026-35455GHSA-jx2q-67wh-xh52

Insufficient input validation in certain NETGEAR routers

Published Jun 9, 2026 · Updated Jun 11, 2026 · Assigned by NETGEAR

Vendor: NETGEAR Product: MR70 Product: MS70 Product: RAXE500 Product: XR1000 Category: Network devices

Description

A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamper with traffic between the router and the Internet, to execute code on the device.

Affected products

Vendor	Product	Affected	Fixed
NETGEAR	MR70	< V1.0.4.48	V1.0.4.48
NETGEAR	MS70	< V1.0.4.48	V1.0.4.48
NETGEAR	RAXE500	< V1.2.14.114	V1.2.14.114
NETGEAR	XR1000	< V1.0.2.86	V1.0.2.86

References

https://www.netgear.com/support/product/mr70/ product patch
https://www.netgear.com/support/product/ms70/ product patch
https://www.netgear.com/support/product/raxe500/ product patch
https://www.netgear.com/support/product/xr1000/ product patch
https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory vendor-advisory