Description
An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NETGEAR | RAX30 | < V1.0.9.92 | V1.0.9.92 |
| NETGEAR | RAX35 | < V1.0.10.72 | V1.0.10.72 |
| NETGEAR | RAX38 | < V1.0.6.106 | V1.0.6.106 |
| NETGEAR | RAX40 | < V1.0.6.106 | V1.0.6.106 |
| NETGEAR | RAXE300 | < V1.0.9.82 | V1.0.9.82 |
References
- https://www.netgear.com/support/product/rax30 product patch
- https://www.netgear.com/support/product/rax35 product patch
- https://www.netgear.com/support/product/rax38 product patch
- https://www.netgear.com/support/product/rax40 product patch
- https://www.netgear.com/support/product/raxe300 product patch
- https://kb.netgear.com/000070912/September-2026-NETGEAR-Security-Advisory vendor-advisory patch