Auth bypass in Netgear Lbr1020
CVE-2026-9212
Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.003 (19.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Netgear Lbr1020 — versions 0
- Netgear Lbr1020_firmware
- Netgear Lbr20 — versions 0
- Netgear Lbr20_firmware
- Netgear R6700ax — versions 0
- Netgear R6700ax_firmware
- Netgear R7800 — versions 0
- Netgear R7800_firmware
- Netgear R9000 — versions 0
- Netgear R9000_firmware
Weakness classification (CWE)
References
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, patch)
Frequently asked questions
- What is CVE-2026-9212?
- CVE-2026-9212 is a high-severity vulnerability in Netgear Lbr1020, classified under Improper Input Validation. CVSS score: 8.0/10. Published 2026-06-09.
- How severe is CVE-2026-9212?
- High severity. CVSS v3 base score is 8.0 out of 10.