RAX30
NETGEAR · 23 CVEs
Insufficient input validation vulnerability exists in certain NETGEAR RAX Models
Sep 8, 2026
Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers
Aug 11, 2026
Certain NETGEAR routers allow unauthenticated users to gain control of the router
Jun 9, 2026
Improper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE300
Nov 11, 2025
NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability
Nov 22, 2024
NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability
Nov 22, 2024
NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability
May 3, 2024
NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability
May 3, 2024
NETGEAR RAX30 Telnet CLI passwd Stack-based Buffer Overflow Remote Code Execution Vulnerability
May 3, 2024
NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability
May 3, 2024
NETGEAR RAX30 cmsCli_authenticate Stack-based Buffer Overflow Remote Code Execution Vulnerability
May 3, 2024
NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability
May 3, 2024
NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability
May 3, 2024
NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability
May 3, 2024
NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability
May 3, 2024
NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability
May 3, 2024
NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution Vulnerability
May 3, 2024
NETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
May 3, 2024
NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability
May 3, 2024
NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability
May 3, 2024
NETGEAR RAX30 GetInfo Missing Authentication Information Disclosure Vulnerability
May 3, 2024
NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability
May 3, 2024
A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX3…
Mar 7, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-9216 | Insufficient input validation vulnerability exists in certain NETGEAR RAX Models | LOW | 0.36% | Sep 8, 2026 |
| CVE-2026-11814 | Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers | MEDIUM | 0.91% | Aug 11, 2026 |
| CVE-2026-9211 | Certain NETGEAR routers allow unauthenticated users to gain control of the router | MEDIUM | 0.39% | Jun 9, 2026 |
| CVE-2025-12943 | Improper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE300 | MEDIUM | 0.16% | Nov 11, 2025 |
| CVE-2023-51635 | NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability | HIGH | 1.34% | Nov 22, 2024 |
| CVE-2023-51634 | NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability | HIGH | 0.57% | Nov 22, 2024 |
| CVE-2023-40480 | NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability | HIGH | 1.27% | May 3, 2024 |
| CVE-2023-40479 | NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability | HIGH | 1.27% | May 3, 2024 |
| CVE-2023-40478 | NETGEAR RAX30 Telnet CLI passwd Stack-based Buffer Overflow Remote Code Execution Vulnerability | MEDIUM | 0.83% | May 3, 2024 |
| CVE-2023-35722 | NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability | HIGH | 1.26% | May 3, 2024 |
| CVE-2023-34285 | NETGEAR RAX30 cmsCli_authenticate Stack-based Buffer Overflow Remote Code Execution Vulnerability | HIGH | 0.90% | May 3, 2024 |
| CVE-2023-34284 | NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability | MEDIUM | 0.45% | May 3, 2024 |
| CVE-2023-34283 | NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability | MEDIUM | 0.65% | May 3, 2024 |
| CVE-2023-27370 | NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability | MEDIUM | 0.34% | May 3, 2024 |
| CVE-2023-27369 | NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability | HIGH | 0.78% | May 3, 2024 |
| CVE-2023-27368 | NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability | HIGH | 0.78% | May 3, 2024 |
| CVE-2023-27367 | NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution Vulnerability | HIGH | 1.37% | May 3, 2024 |
| CVE-2023-27361 | NETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability | HIGH | 0.86% | May 3, 2024 |
| CVE-2023-27360 | NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability | HIGH | 0.45% | May 3, 2024 |
| CVE-2023-27358 | NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability | HIGH | 0.88% | May 3, 2024 |
| CVE-2023-27357 | NETGEAR RAX30 GetInfo Missing Authentication Information Disclosure Vulnerability | MEDIUM | 0.57% | May 3, 2024 |
| CVE-2023-27356 | NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability | HIGH | 1.24% | May 3, 2024 |
| CVE-2023-48725 | A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A specially cr… | HIGH | 19.36% | Mar 7, 2024 |
Showing 1 to 23 of 23 CVEs