Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2026-0420

Missing TLS certificate validation in NETGEAR's ReadyCloud client app

Description

An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting the product's confidentiality. This vulnerability affects the listed NETGEAR models.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NETGEAR RAX120v1

Default version status: unaffected

  • 0 to < V1.2.9.52affected

NETGEAR RAX120v2

Default version status: unaffected

  • 0 to < V1.2.9.52affected

NETGEAR RAX35

Default version status: unaffected

  • 0 to < V1.0.6.106affected

NETGEAR RAX38

Default version status: unaffected

  • 0 to < V1.0.6.106affected

NETGEAR RAX40

Default version status: unaffected

  • 0 to < V1.0.6.106affected

References