CVE-2025-45493: NETGEAR EX8000 Firmware

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the iface parameter in the action_bandwidth function.

Affected products

• NETGEAR EX8000 Firmware: version 1.0.0.126 only

Published 2025-12-23. Last modified 2026-06-17.