Veille CVE

Recherche « NETGEAR RAX30 »

6 CVE

  1. CVE-2026-11732 8.8 Élevée

    NETGEAR CAX30 · NETGEAR RAX30 · NETGEAR RAX5 · NETGEAR RAXE300

    An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized commands on the router. This vulnerability could affect the confidentiality, integrity, and availability of the affected router. It applies only when the Block Sites feature is turned on.

  2. CVE-2026-11731 8.8 Élevée

    NETGEAR RAX30 · NETGEAR RAX29 · NETGEAR RAX28

    An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the confidentiality and integrity of management data and the availability of device-management functions.

  3. CVE-2026-9216 3.5 Faible

    NETGEAR RAX30 · NETGEAR RAX35 · NETGEAR RAX38 · NETGEAR RAX40

    An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.

  4. CVE-2026-11814 6.8 Moyenne

    NETGEAR BE9300 · NETGEAR MR60 · NETGEAR MS60 · NETGEAR R6700AX

    A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.

  5. CVE-2026-11738 4.4 Moyenne

    NETGEAR R7000 · NETGEAR RAXE500 · NETGEAR RS700 · Netgear be9300 firmware

    Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.

  6. CVE-2026-9211 8.8 Élevée

    NETGEAR CAX30 · NETGEAR RAX30 · NETGEAR RAX5 · NETGEAR RAXE300

    An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation.