CVE-2026-9216

Katalog CVE

CVSS 3.5 · Low EPSS 0,36%

Kerentanan Stack-based Buffer Overflow pada netgear rax30 firmware, netgear rax35 firmware +3 lainnya. Skor CVSS 3.1 3.5 (Low) menurut CNA.

Deskripsi (NVD)

An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.

Rincian

Terbit di NVD

8 September 2026

Terakhir diubah

13 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

3.5 (Low), sumber CNA
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-121: Stack-based Buffer Overflow

EPSS (30 hari)

0,36% peluang dieksploitasi; lebih tinggi dari 27,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://kb.netgear.com/000070912/September-2026-NETGEAR-Security-Advisory advisory vendor
• https://www.netgear.com/support/product/rax30 product
• https://www.netgear.com/support/product/rax35 product
• https://www.netgear.com/support/product/rax38 product
• https://www.netgear.com/support/product/rax40 product
• https://www.netgear.com/support/product/raxe300 product