CVE-2026-62656
5.4
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
Summary
A security flaw was found in certain NETGEAR RAX models that could allow a logged-in user to send specially crafted requests to the router and run unauthorized commands. This could enable the user to make unauthorized changes to the router and affect its security and operation.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| NETGEAR | RAXE450 | 0 < V1.2.14.114 | affected |
| NETGEAR | RAXE500 | 0 < V1.2.14.114 | affected |
Weaknesses
- CWE-20: CWE-20 Improper input validation
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
- https://www.netgear.com/support/product/raxe450/
- https://www.netgear.com/support/product/raxe500/
- https://kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.