CVE-2026-0420: NETGEAR RAX120 Firmware

Medium severity, CVSS 5.9. EPSS: 0.1% chance of exploitation in the next 30 days.

An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting the product's confidentiality. This vulnerability affects the listed NETGEAR models.

Affected products

• NETGEAR RAX120 Firmware: before 1.2.9.52 (fixed in 1.2.9.52)
• NETGEAR RAX35 Firmware: before 1.0.6.106 (fixed in 1.0.6.106)
• NETGEAR RAX38 Firmware: before 1.0.6.106 (fixed in 1.0.6.106)
• NETGEAR RAX40 Firmware: before 1.0.6.106 (fixed in 1.0.6.106)

Published 2026-06-09. Last modified 2026-07-23.