Vulnerabilities

TI-2026-44769 CVE-2026-62656 · GHSA-9248-447r-6p88

Post-authenticated command injection vulnerability found in certain NETGEAR RAX models

LOW 24

A security flaw was found in certain NETGEAR RAX models that could allow a logged-in user to send specially crafted requests to the router and run unauthorized commands.

CVSS 4.0MEDIUM 5.4 Adjacent network High privileges No interaction EPSS 0.00256 Published 2026-07-14 Fixed in V1.2.14.114 CWE-20

TI-2026-44770 CVE-2026-62657 · GHSA-h6xv-84v7-xhr4

Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models

LOW 23

A security flaw in the router's certificate validation process was discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take control o…

CVSS 4.0MEDIUM 4.9 Adjacent network No auth No interaction EPSS 0.0015 Published 2026-07-14 Fixed in V1.0.4.48, V1.2.14.114 +1 CWE-599

Vulnerabilities

Filters

Post-authenticated command injection vulnerability found in certain NETGEAR RAX models

Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models