NETGEAR CAX30 Firmware vulnerabilities

3 CVEs affecting NETGEAR CAX30 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-9211, published 2026-06-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-43654, published 2024-05-07. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. NETGEAR CAX30S SSO Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR CAX30S…
CVE-2023-44445, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. NETGEAR CAX30 SSO Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR…
CVE-2026-9211, published 2026-06-09. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation.