Medium · published August 11, 2026
A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.
| Product | Versions | Fixed in |
|---|---|---|
| netgear/be9300_firmware | < 1.0.1.84 | 1.0.1.84 |
| netgear/mr60_firmware | < 1.1.8.142 | 1.1.8.142 |
| netgear/ms60_firmware | < 1.1.8.142 | 1.1.8.142 |
| netgear/r6700ax_firmware | < 1.0.18.164 | 1.0.18.164 |
| netgear/rax10_firmware | < 1.0.5.50 | 1.0.5.50 |
| netgear/rax120_firmware | < 1.2.10.56 | 1.2.10.56 |
| netgear/rax120v2_firmware | < 1.2.10.56 | 1.2.10.56 |
| netgear/rax20_firmware | < 1.0.17.142 | 1.0.17.142 |
| netgear/rax28_firmware | < 1.0.14.108 | 1.0.14.108 |
| netgear/rax29_firmware | < 1.0.14.108 | 1.0.14.108 |
| netgear/rax30_firmware | < 1.0.14.108 | 1.0.14.108 |
| netgear/rax36s_firmware | < 1.0.5.50 | 1.0.5.50 |
| netgear/rax43_firmware | < 1.0.17.142 | 1.0.17.142 |
| netgear/rax45_firmware | < 1.0.17.142 | 1.0.17.142 |
| netgear/rax50_firmware | < 1.0.17.142 | 1.0.17.142 |
| netgear/rax70_firmware | < 1.0.19.172 | 1.0.19.172 |
| netgear/rbr760_firmware | < 6.3.8.11 | 6.3.8.11 |
| netgear/rbs760_firmware | < 6.3.8.11 | 6.3.8.11 |
| netgear/rs100_firmware | < 1.0.1.80 | 1.0.1.80 |
| netgear/rs200_firmware | < 1.0.1.90 | 1.0.1.90 |
| netgear/rs280_firmware | < 1.0.1.90 | 1.0.1.90 |
| netgear/rs300_firmware | < 1.0.1.90 | 1.0.1.90 |
| netgear/rs500_firmware | < 1.0.1.90 | 1.0.1.90 |
| netgear/rs600_firmware | < 1.0.1.90 | 1.0.1.90 |
| netgear/rs70_firmware | < 1.0.1.80 | 1.0.1.80 |
| netgear/rs90_firmware | < 1.0.1.80 | 1.0.1.80 |