Dashboard / CVE-2026-9214

CVE-2026-9214

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 39/100
Published: 2026-08-11 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: High
UI: None
S: X
AT: None
VC: None
VI: High
VA: None

Description

Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
netgear r7000_firmware -

References & Advisories (2)

Bug Bounty Relevance

39 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

4.3 / 10.0 v4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber

EPSS — Exploitation Probability

0.23%
Raw Score 0.002300
Percentile 13.9%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00230
2026-10-28
0.00230

Intelligence Sources

nvd ref →

External Links