An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.
Fix
Patch, vendor advisory and mitigation references on NVD 1
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 1.2 · netgearNVD modified 2026-10-13 17:17
Affected (CPE criteria) 5
cpe:2.3:o:netgear:rax30_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:netgear:rax35_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:netgear:rax38_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:netgear:rax40_firmware:*:*:*:*:*:*:*:*cpe:2.3:o:netgear:raxe300_firmware:*:*:*:*:*:*:*:*
References 6
- https://kb.netgear.com/000070912/September-2026-NETGEAR-Security-Advisory Vendor Advisory
- https://www.netgear.com/support/product/rax30 Product
- https://www.netgear.com/support/product/rax35 Product
- https://www.netgear.com/support/product/rax38 Product
- https://www.netgear.com/support/product/rax40 Product
- https://www.netgear.com/support/product/raxe300 Product