CVEvulnerability
CVE-2026-62656
5.4 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2026-07-14
- Last modified
- 2026-07-15
- Assigner
- a2826606-91e7-4eb6-899e-8484bd4575d5
- CVSS 4.0 (a2826606-91e7-4eb6-899e-8484bd4575d5)
- 5.4 MEDIUM — CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Weaknesses
- CWE-20
Description
A
security flaw was found in certain NETGEAR RAX models that could allow
a logged-in user to send specially crafted requests to the router and run
unauthorized commands. This could enable the user to make unauthorized changes
to the router and affect its security and operation.
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory kb.netgear.com
- https://www.netgear.com/support/product/raxe450/ www.netgear.com
- https://www.netgear.com/support/product/raxe500/ www.netgear.com