RF
Product
Rax35 Firmware
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 6Low 1
Watch
Add Rax35 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-48196 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.60 |
| CVE-2023-27358 | 8.8 | May 3 | NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability Affected: before 1.0.10.94 |
| CVE-2022-27645 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers Affected: before 1.0.10.110 |
| CVE-2022-27642 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.0.10.110 |
| CVE-2022-27647 | 8.0 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.0.10.110 |
| CVE-2021-45493 | 7.5 | Dec 26 | Certain NETGEAR devices are affected by disclosure of administrative credentials Affected: before 1.0.4.102 |
| CVE-2021-38526 | 7.5 | Aug 11 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.3.94 |
| CVE-2021-41449 | 7.1 | Dec 9 | A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive… Affected: before 1.0.4.102 |
| CVE-2021-45549 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.3.96 |
| CVE-2026-11739 | 6.4 | Aug 11 | Command injection vulnerability in some NETGEAR Nighthawk devices Affected: before 1.0.17.142 |
| CVE-2026-0420 | 5.9 | Jun 9 | Missing TLS certificate validation in NETGEAR's ReadyCloud client app Affected: before 1.0.6.106 |
| CVE-2021-38536 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.3.62 |
| CVE-2021-38535 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.3.62 |
| CVE-2021-45604 | 4.5 | Dec 26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.3.96 |
| CVE-2026-9216 | 3.5 | Sep 8 | Insufficient input validation vulnerability exists in certain NETGEAR RAX Models Affected: before 1.0.10.72 |
Showing 15
