NETGEAR RAX35 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting NETGEAR RAX35: 3 record(s), with affected versions and fixes.
CVE-2026-9216
Low · 3.5
CWE-121 Sep 8, 2026
Insufficient input validation vulnerability exists in certain NETGEAR RAX Models
An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.
CVE-2026-11739
Medium · 6.4
CWE-78 Aug 11, 2026
Command injection vulnerability in some NETGEAR Nighthawk devices
A command injection vulnerability in certain affected NETGEAR Nighthawk
devices allows a network-adjacent attacker with the ability to intercept
and modify local network traffic (attacker in the middle) to compromise
the confidentiality and integrity of the affected device.
CVE-2026-0420
Medium · 5.9
CWE-325 Jun 9, 2026
Missing TLS certificate validation in NETGEAR's ReadyCloud client app
An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting the product's confidentiality. This vulnerability affects the listed NETGEAR models.