CVE-2026-62658: medium-severity vulnerability in NETGEAR RAX43
Post-authentication Command Injection Vulnerability in certain Nighthawk RAX series models
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.7epss 0.3%
A security flaw was discovered in certain NETGEAR Nighthawk RAX series routers
that could allow someone already logged in to the device to run unauthorized commands
or code on the router.
CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
Related CVEs — NETGEAR RAX43
In the same product, most dangerous first.
CVE-2026-11739MEDIUMCommand injection vulnerability in some NETGEAR Nighthawk devicesEPSS 2.5%CVE-2026-11814MEDIUMCommand injection vulnerability in certain NETGEAR Nighthawk and Orbi routersEPSS 2.2%CVE-2026-11734LOWDevice administrator can interrupt the normal operation of some NETGEAR Nighthawk devices.EPSS 0.9%CVE-2026-11733LOWBuffer overflow vulnerability in some NETGEAR Nighthawk routersEPSS 0.8%CVE-2026-11736LOWStack-based buffer overflow vulnerability in some NETGEAR Nighthawk routersEPSS 0.8%CVE-2026-11735LOWStack-based buffer overflow vulnerability in some NETGEAR Nighthawk modelsEPSS 0.8%