CVE-2026-62656

Published: Jul 14, 2026Modified: Jul 15, 2026Deferred

5.4

Vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: a2826606-91e7-4eb6-899e-8484bd4575d5 (Secondary)

Description

A security flaw was found in certain NETGEAR RAX models that could allow a logged-in user to send specially crafted requests to the router and run unauthorized commands. This could enable the user to make unauthorized changes to the router and affect its security and operation.

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (3)

https://kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory

Source: a2826606-91e7-4eb6-899e-8484bd4575d5

https://www.netgear.com/support/product/raxe450/

Source: a2826606-91e7-4eb6-899e-8484bd4575d5

https://www.netgear.com/support/product/raxe500/

Source: a2826606-91e7-4eb6-899e-8484bd4575d5

Timeline

No history available yet.