CVE-2021-38526: NETGEAR RAX35 Firmware

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX35 before 1.0.3.94, RAX38 before 1.0.3.94, and RAX40 before 1.0.3.94.

Affected products

• NETGEAR RAX35 Firmware: before 1.0.3.94 (fixed in 1.0.3.94)
• NETGEAR RAX38 Firmware: before 1.0.3.94 (fixed in 1.0.3.94)
• NETGEAR RAX40 Firmware: before 1.0.3.94 (fixed in 1.0.3.94)

Published 2021-08-11. Last modified 2026-06-17.