Skip to content
OpenAdvisories

Product · NETGEAR

RAX30

26 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 4.9
    CVE-2026-11814

    Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers

    A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. T…

    NETGEAR RAX30 RAX43 RAX50 Network devices
  • Medium 5.2
    CVE-2026-9211

    Certain NETGEAR routers allow unauthenticated users to gain control of the router

    An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation.

    NETGEAR RAX30 RAXE300 CAX30 Network devices
  • Medium 5.2
    CVE-2025-12943

    Improper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE300

    Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band WiFi 6E Router) allows attackers with the ability to intercept and tamper traffic destined to the d…

    NETGEAR RAX30 RAXE300 Network devices
  • Medium 6.3
    CVE-2023-34284

    NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability

    NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this v…

    NETGEAR RAX30 Network devices
  • Medium 4.6
    CVE-2023-34283

    NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability

    NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability. This vulnerability allows physically present attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit…

    NETGEAR RAX30 Network devices
  • Medium 5.7
    CVE-2023-27370

    NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability

    NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. Although authentication is re…

    NETGEAR RAX30 Network devices
  • Medium 6.8
    CVE-2023-27361

    NETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

    NETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is required t…

    NETGEAR RAX30 Network devices
  • Medium 6.8
    CVE-2023-27356

    NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability

    NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this…

    NETGEAR RAX30 Network devices
  • Medium 6.5
    CVE-2023-27357

    NETGEAR RAX30 GetInfo Missing Authentication Information Disclosure Vulnerability

    NETGEAR RAX30 GetInfo Missing Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exp…

    NETGEAR RAX30 Network devices