Improper input validation in NETGEAR Raxe450

CVE-2026-62656

A security flaw was found in certain NETGEAR RAX models that could allow a logged-in user to send specially crafted requests to the router and run unauthorized commands. This could enable the user to make unauthorized changes to the router and affect its security and operation.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.003 (16.9th percentile) — read the EPSS interpretation.