Medium severity · published Jul 14, 2026
CVE-2026-62658
Post-authentication Command Injection Vulnerability in certain Nighthawk RAX series models
4.7
CVSS
0.3%
EPSS
No
On KEV
Description
A security flaw was discovered in certain NETGEAR Nighthawk RAX series routers
that could allow someone already logged in to the device to run unauthorized commands
or code on the router.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
RAX43 · NETGEAR
before V1.0.17.142 · source: vendor
RA
RAX45 · NETGEAR
before V1.0.17.142 · source: vendor
RA
RAX50 · NETGEAR
before V1.0.17.142 · source: vendor
RA
RAX54S · NETGEAR
before V1.0.17.142 · source: vendor
RA
RAX54Sv2 · NETGEAR
before V1.1.6.36 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-62658
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-62658
kb.netgear.com
https://kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory
www.netgear.com
https://www.netgear.com/support/product/rax43/
www.netgear.com
https://www.netgear.com/support/product/rax45/
www.netgear.com
https://www.netgear.com/support/product/rax50/
www.netgear.com
https://www.netgear.com/support/product/rax54sv2/
More from RAX43
6.8
CVE-2026-11814
Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers
6.4
CVE-2026-11739
Command injection vulnerability in some NETGEAR Nighthawk devices
4.9
CVE-2026-11736
Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers
4.9
CVE-2026-11735
Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models
4.9
CVE-2026-11733
Buffer overflow vulnerability in some NETGEAR Nighthawk routers