Skip to content
OpenAdvisories
Medium · 4.7 CVE-2026-62658 EUVD-2026-44325GHSA-fj97-xjm9-5vjr

Post-authentication Command Injection Vulnerability in certain Nighthawk RAX series models

Published Jul 14, 2026 · Updated Jul 15, 2026 · Assigned by NETGEAR

Description

A security flaw was discovered in certain NETGEAR Nighthawk RAX series routers
that could allow someone already logged in to the device to run unauthorized commands
or code on the router.

Affected products

VendorProductAffectedFixed
NETGEAR RAX43 < V1.0.17.142 V1.0.17.142
NETGEAR RAX45 < V1.0.17.142 V1.0.17.142
NETGEAR RAX50 < V1.0.17.142 V1.0.17.142
NETGEAR RAX54S < V1.0.17.142 V1.0.17.142
NETGEAR RAX54Sv2 < V1.1.6.36 V1.1.6.36

References