Rax30 Firmware
NETGEAR · 36 CVEs
Insufficient input validation vulnerability exists in certain NETGEAR RAX Models
Sep 8, 2026
Insufficient input validation in certain NETGEAR Nighthawk routers allows administrators to tamper with the device.
Aug 11, 2026
Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers
Aug 11, 2026
Certain NETGEAR routers allow unauthenticated users to gain control of the router
Jun 9, 2026
Improper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE300
Nov 11, 2025
In Netgear RAX30 V1.0.10.94, a PHP-FPM misconfiguration vulnerability is caused by not following the specification to o…
Jul 21, 2025
In Netgear RAX30 V1.0.10.94_3, the USERLIMIT_GLOBAL option is set to 0 in multiple bftpd-related configuration files. T…
Jul 21, 2025
NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability
Nov 22, 2024
NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability
Nov 22, 2024
NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability
May 3, 2024
NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability
May 3, 2024
NETGEAR RAX30 Telnet CLI passwd Stack-based Buffer Overflow Remote Code Execution Vulnerability
May 3, 2024
NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability
May 3, 2024
NETGEAR RAX30 cmsCli_authenticate Stack-based Buffer Overflow Remote Code Execution Vulnerability
May 3, 2024
NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability
May 3, 2024
NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability
May 3, 2024
NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability
May 3, 2024
NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability
May 3, 2024
NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability
May 3, 2024
NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution Vulnerability
May 3, 2024
NETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
May 3, 2024
NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability
May 3, 2024
NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability
May 3, 2024
NETGEAR RAX30 GetInfo Missing Authentication Information Disclosure Vulnerability
May 3, 2024
NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability
May 3, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-9216 | Insufficient input validation vulnerability exists in certain NETGEAR RAX Models | LOW | 0.36% | Sep 8, 2026 |
| CVE-2026-11738 | Insufficient input validation in certain NETGEAR Nighthawk routers allows administrators to tamper with the device. | MEDIUM | 0.27% | Aug 11, 2026 |
| CVE-2026-11814 | Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers | MEDIUM | 0.91% | Aug 11, 2026 |
| CVE-2026-9211 | Certain NETGEAR routers allow unauthenticated users to gain control of the router | MEDIUM | 0.39% | Jun 9, 2026 |
| CVE-2025-12943 | Improper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE300 | MEDIUM | 0.16% | Nov 11, 2025 |
| CVE-2025-44658 | In Netgear RAX30 V1.0.10.94, a PHP-FPM misconfiguration vulnerability is caused by not following the specification to only limit FPM to .php extensions. An att… | CRITICAL | 1.01% | Jul 21, 2025 |
| CVE-2025-44652 | In Netgear RAX30 V1.0.10.94_3, the USERLIMIT_GLOBAL option is set to 0 in multiple bftpd-related configuration files. This can cause DoS attacks when unlimited… | HIGH | 0.57% | Jul 21, 2025 |
| CVE-2023-51635 | NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability | HIGH | 1.34% | Nov 22, 2024 |
| CVE-2023-51634 | NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability | HIGH | 0.57% | Nov 22, 2024 |
| CVE-2023-40480 | NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability | HIGH | 1.27% | May 3, 2024 |
| CVE-2023-40479 | NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability | HIGH | 1.27% | May 3, 2024 |
| CVE-2023-40478 | NETGEAR RAX30 Telnet CLI passwd Stack-based Buffer Overflow Remote Code Execution Vulnerability | MEDIUM | 0.83% | May 3, 2024 |
| CVE-2023-35722 | NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability | HIGH | 1.26% | May 3, 2024 |
| CVE-2023-34285 | NETGEAR RAX30 cmsCli_authenticate Stack-based Buffer Overflow Remote Code Execution Vulnerability | HIGH | 0.90% | May 3, 2024 |
| CVE-2023-34284 | NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability | MEDIUM | 0.45% | May 3, 2024 |
| CVE-2023-34283 | NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability | MEDIUM | 0.65% | May 3, 2024 |
| CVE-2023-27370 | NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability | MEDIUM | 0.34% | May 3, 2024 |
| CVE-2023-27369 | NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability | HIGH | 0.78% | May 3, 2024 |
| CVE-2023-27368 | NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability | HIGH | 0.78% | May 3, 2024 |
| CVE-2023-27367 | NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution Vulnerability | HIGH | 1.37% | May 3, 2024 |
| CVE-2023-27361 | NETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability | HIGH | 0.86% | May 3, 2024 |
| CVE-2023-27360 | NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability | HIGH | 0.45% | May 3, 2024 |
| CVE-2023-27358 | NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability | HIGH | 0.88% | May 3, 2024 |
| CVE-2023-27357 | NETGEAR RAX30 GetInfo Missing Authentication Information Disclosure Vulnerability | MEDIUM | 0.57% | May 3, 2024 |
| CVE-2023-27356 | NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability | HIGH | 1.24% | May 3, 2024 |
Showing 1 to 25 of 36 CVEs