NETGEAR RAX30 Firmware vulnerabilities

36 CVEs affecting NETGEAR RAX30 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-9216, published 2026-09-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-27853, published 2023-03-10. Critical severity, CVSS 9.8. EPSS: 19.7% chance of exploitation in the next 30 days. NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to execute arbitrary code on the device.
CVE-2023-48725, published 2024-03-07. High severity, CVSS 8.8. EPSS: 19.4% chance of exploitation in the next 30 days. A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A specially crafted HTTP request can lead to code…
CVE-2023-27367, published 2024-05-03. High severity, CVSS 8.0. EPSS: 1.4% chance of exploitation in the next 30 days. NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR…
CVE-2023-51635, published 2024-11-22. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of…
CVE-2023-40480, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR…
CVE-2023-40479, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30…
CVE-2023-35722, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30…
CVE-2023-27356, published 2024-05-03. High severity, CVSS 8.0. EPSS: 1.2% chance of exploitation in the next 30 days. NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30…
CVE-2025-44658, published 2025-07-21. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. In Netgear RAX30 V1.0.10.94, a PHP-FPM misconfiguration vulnerability is caused by not following the specification to only limit FPM to .php extensions. An attacker may exploit this by uploading…
CVE-2026-11814, published 2026-08-11. Medium severity, CVSS 6.8. EPSS: 0.9% chance of exploitation in the next 30 days. A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise…

Latest

CVE-2026-9216, published 2026-09-08. Low severity, CVSS 3.5. EPSS: 0.4% chance of exploitation in the next 30 days. An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's…
CVE-2026-11738, published 2026-08-11. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and…
CVE-2026-9211, published 2026-06-09. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation.
CVE-2025-12943, published 2025-11-11. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band WiFi 6E Router) allows attackers with…
CVE-2025-44652, published 2025-07-21. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. In Netgear RAX30 V1.0.10.94_3, the USERLIMIT_GLOBAL option is set to 0 in multiple bftpd-related configuration files. This can cause DoS attacks when unlimited users are connected.
CVE-2023-51634, published 2024-11-22. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on…