Low · published September 8, 2026
An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.
| Product | Versions | Fixed in |
|---|---|---|
| netgear/rax30_firmware | < 1.0.9.92 | 1.0.9.92 |
| netgear/rax35_firmware | < 1.0.10.72 | 1.0.10.72 |
| netgear/rax38_firmware | < 1.0.6.106 | 1.0.6.106 |
| netgear/rax40_firmware | < 1.0.6.106 | 1.0.6.106 |
| netgear/raxe300_firmware | < 1.0.10.72 | 1.0.10.72 |