CVEvulnerability
CVE-2026-62658
4.7 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2026-07-14
- Last modified
- 2026-07-15
- Assigner
- a2826606-91e7-4eb6-899e-8484bd4575d5
- CVSS 4.0 (a2826606-91e7-4eb6-899e-8484bd4575d5)
- 4.7 MEDIUM — CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Weaknesses
- CWE-20
Description
A security flaw was discovered in certain NETGEAR Nighthawk RAX series routers
that could allow someone already logged in to the device to run unauthorized commands
or code on the router.
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory kb.netgear.com
- https://www.netgear.com/support/product/rax43/ www.netgear.com
- https://www.netgear.com/support/product/rax45/ www.netgear.com
- https://www.netgear.com/support/product/rax50/ www.netgear.com
- https://www.netgear.com/support/product/rax54sv2/ www.netgear.com