A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.
Weakness
The product does not validate, or incorrectly validates, a certificate.
Potential Mitigations
Related Attack Patterns
References
- https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory
- https://www.netgear.com/support/product/be9300/
- https://www.netgear.com/support/product/mr60/
- https://www.netgear.com/support/product/ms60/
- https://www.netgear.com/support/product/r6700ax/
- https://www.netgear.com/support/product/rax10/
- https://www.netgear.com/support/product/rax120/
- https://www.netgear.com/support/product/rax120v2/
- https://www.netgear.com/support/product/rax20/
- https://www.netgear.com/support/product/rax28/
- https://www.netgear.com/support/product/rax29/
- https://www.netgear.com/support/product/rax30/
- https://www.netgear.com/support/product/rax36s/
- https://www.netgear.com/support/product/rax43/
- https://www.netgear.com/support/product/rax45/
- https://www.netgear.com/support/product/rax50/
- https://www.netgear.com/support/product/rax70/
- https://www.netgear.com/support/product/rbr760/
- https://www.netgear.com/support/product/rbs760/
- https://www.netgear.com/support/product/rs100/
- https://www.netgear.com/support/product/rs200/
- https://www.netgear.com/support/product/rs280/
- https://www.netgear.com/support/product/rs300/
- https://www.netgear.com/support/product/rs500/
- https://www.netgear.com/support/product/rs600/
- https://www.netgear.com/support/product/rs70/
- https://www.netgear.com/support/product/rs90/