Netgear Rax50 vulnerabilities, page 3

57 vulnerabilities

Known vulnerabilities in Netgear Rax50, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CriticalCVE-2024-57229netgear · rax50_firmwarenetgear rax50_firmwareNETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function.EPSS1.18%9.8CriticalCVE-2024-57235netgear · rax50_firmwarenetgear rax50_firmwareNETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vif_enable function.EPSS1.18%9.8CriticalCVE-2024-57234netgear · rax50_firmwarenetgear rax50_firmwareNETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_cancel_wps function.EPSS1.18%4.7MediumCVE-2026-62658netgear · rax43_firmware +4 morePost-authentication Command Injection Vulnerability in certain Nighthawk RAX series modelsA security flaw was discovered in certain NETGEAR Nighthawk RAX series routers that could allow someone already logged in to the device to run unauthorized commands or code on the router.EPSS0.30%4.9MediumCVE-2026-11736netgear · rax20_firmware +18 moreStack-based buffer overflow vulnerability in some NETGEAR Nighthawk routersA stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality.EPSS0.51%4.5MediumCVE-2026-11737netgear · rax20_firmware +12 moreSome NETGEAR Nighthawk devices allow administrators to tamper with the deviceInsufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality.EPSS0.22%6.8MediumCVE-2026-11814netgear · be9300_firmware +25 moreCommand injection vulnerability in certain NETGEAR Nighthawk and Orbi routersA command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.EPSS0.91%4.9MediumCVE-2026-11735netgear · r7000 +19 moreStack-based buffer overflow vulnerability in some NETGEAR Nighthawk modelsA stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.EPSS0.51%2.7LowCVE-2026-11734netgear · mr70_firmware +14 moreDevice administrator can interrupt the normal operation of some NETGEAR Nighthawk devices.A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.EPSS0.60%4.9MediumCVE-2026-11733netgear · rax41_firmware +10 moreBuffer overflow vulnerability in some NETGEAR Nighthawk routersA buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.EPSS0.51%4.4MediumCVE-2026-11738netgear · be9300_firmware +28 moreInsufficient input validation in certain NETGEAR Nighthawk routers allows administrators to tamper with the device.Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.EPSS0.27%6.4MediumCVE-2026-11739netgear · mr60_firmware +26 moreCommand injection vulnerability in some NETGEAR Nighthawk devicesA command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.EPSS1.07%4.5MediumCVE-2026-0418netgear · cbr750_firmware +34 moreCertain NETGEAR devices allow administrators to tamper with systemInsufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.EPSS0.24%4.5MediumCVE-2026-0410netgear · r7000 +19 moreInsufficient input validation in certain NETGEAR routersAuthenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.EPSS0.22%4.5MediumCVE-2026-0417netgear · mr60_firmware +26 moreInsufficient input validation in certain NETGEAR routersInsufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity.EPSS0.23%4.9MediumCVE-2026-9210netgear · ex3700 +30 moreCertain NETGEAR routers allow authenticated administrators to gain unintended control of the routerInsufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.EPSS0.35%8.8HighCVE-2023-35721netgear · multiple routers +1 moreNETGEAR Multiple Routers curl_post Improper Certificate Validation Remote Code Execution VulnerabilityThis vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of multiple NETGEAR routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the update functionality, which operates over HTTPS. The issue results from the lack of proper validation of the certificate presented by the server. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-19981.EPSS1.00%