Description
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality.
Affected products
netgear: rax20 firmware; netgear: rax20; netgear: rax41 firmware; netgear: rax41; netgear: rax41v2 firmware; netgear: rax41v2; netgear: rax42 firmware; netgear: rax42; netgear: rax42v2 firmware; netgear: rax42v2; netgear: rax43 firmware; netgear: rax43; netgear: rax43v2 firmware; netgear: rax43v2; netgear: rax45 firmware
References10
- kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory Vendor Advisory
- www.netgear.com/support/product/rax20/ Product
- www.netgear.com/support/product/rax41/ Product
- www.netgear.com/support/product/rax41v2/ Product
- www.netgear.com/support/product/rax42/ Product
- www.netgear.com/support/product/rax42v2/ Product
- www.netgear.com/support/product/rax43/ Product
- www.netgear.com/support/product/rax43v2/ Product
- www.netgear.com/support/product/rax45/ Product
- www.netgear.com/support/product/rax49s/ Product
Metrics
- CVSS 3.1
-
4.5
MEDIUM
Score source: NVD
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N - CVSS 4.0
-
4.3
MEDIUM
Score source: CNA
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber - EPSS — exploit probability
- 0% percentile: 27 · as of 12 November 2026
- CWE
- CWE-20
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.