NETGEAR RAX120v2 vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting NETGEAR RAX120v2: 3 record(s), with affected versions and fixes.

CVE-2026-11814 Medium · 6.8 CWE-77 Aug 11, 2026

Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.

CVE-2026-9212 High · 8.0 CWE-20 Jun 9, 2026

Insufficient authentication and input validation in certain NETGEAR products

Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.

CVE-2026-0420 Medium · 5.9 CWE-325 Jun 9, 2026

Missing TLS certificate validation in NETGEAR's ReadyCloud client app

An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting the product's confidentiality. This vulnerability affects the listed NETGEAR models.