NETGEAR RAXE300 Firmware vulnerabilities

5 CVEs affecting NETGEAR RAXE300 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-9216, published 2026-09-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-27356, published 2024-05-03. High severity, CVSS 8.0. EPSS: 1.2% chance of exploitation in the next 30 days. NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30…
CVE-2023-27358, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30…
CVE-2026-9211, published 2026-06-09. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation.
CVE-2026-9216, published 2026-09-08. Low severity, CVSS 3.5. EPSS: 0.4% chance of exploitation in the next 30 days. An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's…
CVE-2025-12943, published 2025-11-11. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band WiFi 6E Router) allows attackers with…