Rax30 (Netgear) - vulnerabilities (CVEs)

24 CVEs, 2 in the last 30 days, 8 known versions, newest CVE from 2026-10-13. Vendor: Netgear.

CVEs of Rax30

• CVE-2026-11732 - CVSS 8.8 (high), 2026-10-13: An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent…
• CVE-2026-11731 - CVSS 8.8 (high), 2026-10-13: An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected…
• CVE-2026-9216 - CVSS 3.5 (low), 2026-09-08: An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi…
• CVE-2026-11814 - CVSS 6.8 (medium), 2026-08-11: A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network…
• CVE-2026-9211 - CVSS 8.8 (high), 2026-06-09: An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation.
• CVE-2025-12943 - CVSS 7.5 (high), 2025-11-11: Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800…
• CVE-2023-51634 - CVSS 7.5 (high), 2024-11-22: NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to compromise the…
• CVE-2023-51635 - CVSS 8.8 (high), 2024-11-22: NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute…
• CVE-2023-40478 - CVSS 8 (high), 2024-05-03: NETGEAR RAX30 Telnet CLI passwd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to…
• CVE-2023-40480 - CVSS 8.8 (high), 2024-05-03: NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary…
• CVE-2023-40479 - CVSS 8.8 (high), 2024-05-03: NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on…
• CVE-2023-35722 - CVSS 8.8 (high), 2024-05-03: NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on…
• CVE-2023-34285 - CVSS 8.8 (high), 2024-05-03: NETGEAR RAX30 cmsCli_authenticate Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to…
• CVE-2023-34283 - CVSS 4.6 (medium), 2024-05-03: NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability. This vulnerability allows physically present attackers to disclose sensitive…
• CVE-2023-34284 - CVSS 6.3 (medium), 2024-05-03: NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication…
• CVE-2023-27368 - CVSS 8.8 (high), 2024-05-03: NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute…
• CVE-2023-27367 - CVSS 8 (high), 2024-05-03: NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code…
• CVE-2023-27370 - CVSS 5.7 (medium), 2024-05-03: NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose…
• CVE-2023-27369 - CVSS 8.8 (high), 2024-05-03: NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute…
• CVE-2023-27360 - CVSS 8.8 (high), 2024-05-03: NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on…
• CVE-2023-27361 - CVSS 8 (high), 2024-05-03: NETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to…
• CVE-2023-27356 - CVSS 8 (high), 2024-05-03: NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on…
• CVE-2023-27358 - CVSS 8.8 (high), 2024-05-03: NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code…
• CVE-2023-27357 - CVSS 6.5 (medium), 2024-05-03: NETGEAR RAX30 GetInfo Missing Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive…
• CVE-2023-48725 - CVSS 8.8 (high), 2024-03-07: A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A specially…