Vulnerabilidades do NETGEAR RAX40

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam NETGEAR RAX40: 3 registro(s), com versões afetadas e correções.

CVE-2026-9218 Média · 4.5 CWE-20 13/10/2026

Insufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized access

Insufficient input validation vulnerability in time server (NTP) setting of the listed NETGEAR models allows an attacker who is connected to the router’s local network and has the router’s administrator credentials to run unauthorized commands on the router. This vulnerability could impact the integrity of the affected router. There is no impact on confidentiality or availability of the affected router.

CVE-2026-9216 Baixa · 3.5 CWE-121 08/09/2026

Insufficient input validation vulnerability exists in certain NETGEAR RAX Models

An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.

CVE-2026-0420 Média · 5.9 CWE-325 09/06/2026

Missing TLS certificate validation in NETGEAR's ReadyCloud client app

An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting the product's confidentiality. This vulnerability affects the listed NETGEAR models.