Skip to content
OpenAdvisories
High · 8.8 CVE-2026-123180 EUVD-2026-121277GHSA-hjp9-mcq8-m479

Missing Authentication Vulnerability in NETGEAR Nighthawk RAX30 models

Published Nov 10, 2026 · Updated Nov 11, 2026 · Assigned by NETGEAR

Description

A missing authentication vulnerability in the listed NETGEAR RAX models allows an network adjacent attacker who has authenticated to wifi network to obtain sensitive information and tamper with device configuration, including administrator credentials, without authenticating to the device. This affects the confidentiality, integrity and availability of the router.

Affected products

VendorProductAffectedFixed
NETGEAR RAX30 < v1.0.15.110 v1.0.15.110

References