RF
Product
Rax50 Firmware
55
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 18High 14Medium 22Low 1
Watch
Add Rax50 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-57235 | 9.8 | May 5 | NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vif_enable function Affected: 1.0.2.26 |
| CVE-2024-57234 | 9.8 | May 5 | NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_cancel_wps function Affected: 1.0.2.26 |
| CVE-2024-57233 | 9.8 | May 5 | NETGEAR RAX5 (AX1600 WiFi Router) v1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vif_disable function Affected: 1.0.2.26 |
| CVE-2024-57232 | 9.8 | May 5 | NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode function Affected: 1.0.2.26 |
| CVE-2024-57231 | 9.8 | May 5 | NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function Affected: 1.0.2.26 |
| CVE-2024-57230 | 9.8 | May 5 | NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pin_wps function Affected: 1.0.2.26 |
| CVE-2024-57229 | 9.8 | May 5 | NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function Affected: 1.0.2.26 |
| CVE-2021-45622 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.3.96 |
| CVE-2021-45621 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.3.96 |
| CVE-2021-45620 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.3.96 |
| CVE-2021-45617 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.2.82 |
| CVE-2021-45616 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.3.96 |
| CVE-2021-45614 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.3.96 |
| CVE-2021-45613 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.3.96 |
| CVE-2021-45612 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.3.96 |
| CVE-2021-45610 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.82 |
| CVE-2020-35796 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.32 |
| CVE-2020-35795 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.0.2.64 |
| CVE-2021-34982 | 8.8 | May 7 | NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1.0.4.100 |
| CVE-2023-35721 | 8.8 | May 3 | NETGEAR Multiple Routers curl_post Improper Certificate Validation Remote Code Execution Vulnerability Affected: before 1.0.15.128 |
| CVE-2022-27645 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers Affected: before 1.0.10.110 |
| CVE-2022-27642 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.0.10.110 |
| CVE-2021-45541 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.2.72 |
| CVE-2021-45530 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.2.82 |
| CVE-2021-34991 | 8.8 | Nov 15 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers Affected: before 1.0.4.100 |
| CVE-2021-29068 | 8.8 | Mar 23 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.0.2.64 |
| CVE-2021-45540 | 8.4 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.2.66 |
| CVE-2021-29073 | 8.4 | Mar 23 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.2.72 |
| CVE-2022-27647 | 8.0 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.0.10.110 |
| CVE-2020-35798 | 7.8 | Dec 30 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.0.2.66 |
| CVE-2025-12946 | 7.5 | Dec 9 | A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using… Affected: before 1.2.14.114 |
| CVE-2021-45647 | 7.5 | Dec 26 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.0.2.72 |
| CVE-2026-11814 | 6.8 | Aug 11 | Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers Affected: before 1.0.17.142 |
| CVE-2021-45549 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.3.96 |
| CVE-2021-45539 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.0.2.28 |
| CVE-2021-34983 | 6.5 | May 7 | NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability Affected: before 1.0.4.100 |
| CVE-2026-11739 | 6.4 | Aug 11 | Command injection vulnerability in some NETGEAR Nighthawk devices Affected: before 1.1.6.36 |
| CVE-2021-45639 | 6.1 | Dec 26 | Certain NETGEAR devices are affected by reflected XSS Affected: before 1.0.2.28 |
| CVE-2026-11736 | 4.9 | Aug 11 | Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers Affected: before 1.0.16.132 |
| CVE-2026-11735 | 4.9 | Aug 11 | Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models Affected: before 1.0.16.132 |
| CVE-2026-11733 | 4.9 | Aug 11 | Buffer overflow vulnerability in some NETGEAR Nighthawk routers Affected: before 1.1.6.36 |
| CVE-2021-38524 | 4.9 | Aug 11 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.0.2.32 |
| CVE-2021-45671 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.2.72 |
| CVE-2021-45670 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.2.72 |
| CVE-2021-45669 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.0.2.72 |
| CVE-2021-45668 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: through 1.0.2.72 |
| CVE-2021-45667 | 4.8 | Dec 26 | Certain NETGEAR devices are affected by stored XSS Affected: through 1.0.2.72 |
| CVE-2026-11737 | 4.5 | Aug 11 | Some NETGEAR Nighthawk devices allow administrators to tamper with the device Affected: before 1.1.6.36 |
| CVE-2026-0418 | 4.5 | Jun 9 | Certain NETGEAR devices allow administrators to tamper with system Affected: before 1.0.11.112 |
| CVE-2026-0417 | 4.5 | Jun 9 | Insufficient input validation in certain NETGEAR routers Affected: before 1.0.12.120 |
