Medium · published August 11, 2026
Insufficient input validation vulnerability in the listed
NETGEAR models allows authenticated administrators connected to the
local network to make unauthorized modification to the device software and
functionality.
| Product | Versions | Fixed in |
|---|---|---|
| netgear/rax54s_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear/rax54sv2_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear/rax20_firmware | < 1.0.18.144 | 1.0.18.144 |
| netgear/rax41_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear/rax41v2_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear/rax42_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear/rax42v2_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear/rax43_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear/rax43v2_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear/rax45_firmware | < 1.0.17.142 | 1.0.17.142 |
| netgear/rax49s_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear/rax50_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear/rax50v2_firmware | < 1.1.6.36 | 1.1.6.36 |