Low [CVE-2026-9216] insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI
This low-severity NETGEAR advisory covers CVE-2026-9216 affecting RAX30, RAX35, RAX38.
Android app · Google Play
Monitor future NETGEAR CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Summary
An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact.
A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.
Affected products named by the advisory: RAX30; RAX35; RAX38; RAX40; and 1 more.
Affected products named by the advisory: RAXE300.
- RAX30 before V1.0.9.92
- RAX35 before V1.0.10.72
- RAX38 before V1.0.6.106
- RAX40 before V1.0.6.106
- RAXE300 before V1.0.10.72
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
- V1.0.9.92
- V1.0.10.72
- V1.0.6.106
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
Mitigation
Upgrade to a fixed release: V1.0.9.92, V1.0.10.72, V1.0.6.106. That is the remediation for this advisory.
The vendor advisory may list additional interim mitigations or workarounds not captured here — review it before change work.
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.