Rax30

An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.

Published: 2026-09-08T17:09:12.157Z
Updated: 2026-10-13T16:31:50.469Z

An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized commands on the router. This vulnerability could affect the confidentiality, integrity, and availability of the affected router. It applies only when the Block Sites feature is turned on.

Published: 2026-10-13T14:42:50.698Z
Updated: 2026-10-16T14:10:44.857Z

An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the confidentiality and integrity of management data and the availability of device-management functions.

Published: 2026-10-13T14:41:42.298Z
Updated: 2026-10-16T13:58:30.825Z

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.

Published: 2026-08-11T15:06:08.351Z
Updated: 2026-08-12T14:42:32.098Z

An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation.

Published: 2026-06-09T15:50:48.437Z
Updated: 2026-06-10T18:16:48.508Z