Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2026-62656

Post-authenticated command injection vulnerability found in certain NETGEAR RAX models

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NETGEAR

Description

A security flaw was found in certain NETGEAR RAX models that could allow a logged-in user to send specially crafted requests to the router and run unauthorized commands. This could enable the user to make unauthorized changes to the router and affect its security and operation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NETGEAR RAXE450

Default version status: unaffected

  • 0 to < V1.2.14.114affected

NETGEAR RAXE500

Default version status: unaffected

  • 0 to < V1.2.14.114affected

References