RAX41v2
by Netgear
CVEs (5)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-12946 | Hig | 0.49 | 7.5 | 0.00 | Dec 9, 2025 | A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques (MiTM) to manipulate DNS responses and execute commands when speedtests are… | ||
| CVE-2026-11737 | Med | 0.28 | — | — | Aug 11, 2026 | Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality. | ||
| CVE-2026-0410 | Low | 0.12 | — | 0.00 | Jun 9, 2026 | Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality. | ||
| CVE-2026-11734 | Low | 0.07 | — | — | Aug 11, 2026 | A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable. | ||
| CVE-2026-11733 | Low | 0.07 | — | — | Aug 11, 2026 | A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device. |
- risk 0.49cvss 7.5epss 0.00
A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques (MiTM) to manipulate DNS responses and execute commands when speedtests are…
- risk 0.28cvss —epss —
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality.
- risk 0.12cvss —epss 0.00
Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.
- risk 0.07cvss —epss —
A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.
- risk 0.07cvss —epss —
A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.