Improper input validation in NETGEAR Raxe450
CVE-2026-62656
A security flaw was found in certain NETGEAR RAX models that could allow a logged-in user to send specially crafted requests to the router and run unauthorized commands. This could enable the user to make unauthorized changes to the router and affect its security and operation.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
EPSS exploit prediction
EPSS: 0.003 (16.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 16th percentile — 16.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
- NETGEAR Raxe450 — versions 0
- NETGEAR Raxe500 — versions 0
Weakness classification (CWE)
References
- a2826606-91e7-4eb6-899e-8484bd4575d5 (product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (vendor-advisory)