Medium · 4.3 CVE-2026-9214 EUVD-2026-56196GHSA-xgc8-2x4j-3crm

Insufficient input validation in NETGEAR R7000 router allows administrators to tamper with the device.

Published Aug 11, 2026 · Updated Aug 12, 2026 · Assigned by NETGEAR

Vendor: NETGEAR Product: R7000 Category: Network devices

Description

Insufficient input validation vulnerability in the NETGEAR R7000 models
allows authenticated administrators connected to the local network to
make unauthorized modification to router software and functionality.

Affected products

Vendor	Product	Affected	Fixed
NETGEAR	R7000	V1.0.12.216	—

References

https://www.netgear.com/support/product/r7000 product
https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory vendor-advisory patch