Improper input validation in NETGEAR Rax43
CVE-2026-62658
A security flaw was discovered in certain NETGEAR Nighthawk RAX series routers that could allow someone already logged in to the device to run unauthorized commands or code on the router.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.003 (22.3th percentile) — read the EPSS interpretation.
Affected products
- Netgear Rax43 — versions 0
- Netgear Rax45 — versions 0
- Netgear Rax50 — versions 0
- Netgear Rax54s — versions 0
- Netgear Rax54sv2 — versions 0
Weakness classification (CWE)
References
- a2826606-91e7-4eb6-899e-8484bd4575d5 (product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (vendor-advisory)