Medium severity · published Jul 14, 2026
CVE-2026-62659
Authenticated users can make unauthorized changes on NETGEAR WAX333 Access Points
4.3
CVSS
0.2%
EPSS
No
On KEV
Description
A security flaw was discovered in the NETGEAR WAX333 Access Point that could allow someone already logged in and connected to the local network to make unauthorized changes to the device's settings
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WA
WAX333 · NETGEAR
before V12.8.0.100 · source: vendor