Post-authentication Command Injection Vulnerability in certain Nighthawk RAX series models
Priority LOW 21CWE-20Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- Present
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
A security flaw was discovered in certain NETGEAR Nighthawk RAX series routers that could allow someone already logged in to the device to run unauthorized commands or code on the router.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00302 23rd percentileScored 2026-11-07
Fix Fixed RAX43 (NETGEAR): V1.0.17.142RAX45 (NETGEAR): V1.0.17.142+3 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| NETGEAR | RAX43 | before V1.0.17.142 | V1.0.17.142 | Patch available | CNA |
| NETGEAR | RAX45 | before V1.0.17.142 | V1.0.17.142 | Patch available | CNA |
| NETGEAR | RAX50 | before V1.0.17.142 | V1.0.17.142 | Patch available | CNA |
| NETGEAR | RAX54S | before V1.0.17.142 | V1.0.17.142 | Patch available | CNA |
| NETGEAR | RAX54Sv2 | before V1.1.6.36 | V1.1.6.36 | Patch available | CNA |
- RAX43 VendorNETGEAR Affected before V1.0.17.142 Fixed in V1.0.17.142 Patch available CNA
- RAX45 VendorNETGEAR Affected before V1.0.17.142 Fixed in V1.0.17.142 Patch available CNA
- RAX50 VendorNETGEAR Affected before V1.0.17.142 Fixed in V1.0.17.142 Patch available CNA
- RAX54S VendorNETGEAR Affected before V1.0.17.142 Fixed in V1.0.17.142 Patch available CNA
- RAX54Sv2 VendorNETGEAR Affected before V1.1.6.36 Fixed in V1.1.6.36 Patch available CNA
Remediation
- Fix · CNA RAX43 (NETGEAR) Fixed in V1.0.17.142
- Fix · CNA RAX45 (NETGEAR) Fixed in V1.0.17.142
- Fix · CNA RAX50 (NETGEAR) Fixed in V1.0.17.142
- Fix · CNA RAX54S (NETGEAR) Fixed in V1.0.17.142
- Fix · CNA RAX54Sv2 (NETGEAR) Fixed in V1.1.6.36
Timeline
- 2026-10-02 Threatist record created from CVE-2026-62658
- 2026-10-03 Alias added: GHSA-fj97-xjm9-5vjr
References
More NETGEAR vulnerabilities
- TI-2020-16346 NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level. KEVCVSS 3.1CRITICAL 9.8
- TI-2017-04600 Buffer overflow in NETGEAR All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66… KEVCVSS 3.1CRITICAL 9.8
- TI-2017-03982 ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote… KEVCVSS 3.1CRITICAL 9.8
- TI-2016-08250 The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter… KEVCVSS 3.1CRITICAL 9.8
- TI-2016-01416 (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and… KEVCVSS 3.1CRITICAL 9.8
- TI-2017-04162 dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote… KEVCVSS 3.1HIGH 8.8
Sources
- CVE-2026-62658 · CVE Program
- CVE-2026-62658 · NVD
- FIRST EPSS
- GHSA-fj97-xjm9-5vjr · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences