Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-62656 EUVD-2026-44328GHSA-9248-447r-6p88

Post-authenticated command injection vulnerability found in certain NETGEAR RAX models

Published Jul 14, 2026 · Updated Jul 15, 2026 · Assigned by NETGEAR

Description

A
security flaw was found in certain NETGEAR RAX models that could allow
a logged-in user to send specially crafted requests to the router and run
unauthorized commands. This could enable the user to make unauthorized changes
to the router and affect its security and operation.

Affected products

VendorProductAffectedFixed
NETGEAR RAXE450 < V1.2.14.114 V1.2.14.114
NETGEAR RAXE500 < V1.2.14.114 V1.2.14.114

References