Netgear Rax43 vulnerabilities, page 2
35 vulnerabilities
Known vulnerabilities in Netgear Rax43, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-27645netgearlax20_firmware+23
EPSS score1.28%
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within readycloud_control.cgi. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15762.CVE-2022-27642netgearcax80_firmware+33EPSS score0.87%
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service. The issue results from incorrect string matching logic when accessing protected pages. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-15854.CVE-2026-62658netgearrax43_firmware+4EPSS score0.30%
A security flaw was discovered in certain NETGEAR Nighthawk RAX series routers
that could allow someone already logged in to the device to run unauthorized commands
or code on the router.CVE-2026-11736netgearrax20_firmware+18EPSS score0.51%
A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality.CVE-2026-11737netgearrax20_firmware+12EPSS score0.22%
Insufficient input validation vulnerability in the listed
NETGEAR models allows authenticated administrators connected to the
local network to make unauthorized modification to the device software and
functionality.CVE-2026-11814netgearbe9300_firmware+25EPSS score0.91%
A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.CVE-2026-11735netgearr7000+19EPSS score0.51%
A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.CVE-2026-11734netgearmr70_firmware+14EPSS score0.60%
A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.CVE-2026-11733netgearrax41_firmware+10EPSS score0.51%
A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.CVE-2026-11738netgearbe9300_firmware+28EPSS score0.27%
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.CVE-2026-11739netgearmr60_firmware+26EPSS score1.07%
A command injection vulnerability in certain affected NETGEAR Nighthawk
devices allows a network-adjacent attacker with the ability to intercept
and modify local network traffic (attacker in the middle) to compromise
the confidentiality and integrity of the affected device.CVE-2026-0418netgearcbr750_firmware+34EPSS score0.24%
Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network
to tamper with the system.CVE-2026-0410netgearr7000+19EPSS score0.22%
Authenticated administrators connected to the local network can gain
elevated access to the router and make unauthorized changes to router
software and functionality.CVE-2026-0417netgearmr60_firmware+26EPSS score0.23%
Insufficient input validation vulnerability in the listed NETGEAR devices allows
authenticated administrators connected to the local network to tamper with
the router's integrity.CVE-2026-9210netgearex3700+30EPSS score0.35%
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.