A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise…
Info
Summary
A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory
- https://www.netgear.com/support/product/be9300/
- https://www.netgear.com/support/product/mr60/
- https://www.netgear.com/support/product/ms60/
- https://www.netgear.com/support/product/r6700ax/
- https://www.netgear.com/support/product/rax10/
- https://www.netgear.com/support/product/rax120/
- https://www.netgear.com/support/product/rax120v2/
- https://www.netgear.com/support/product/rax20/
- https://www.netgear.com/support/product/rax28/
- https://www.netgear.com/support/product/rax29/
- https://www.netgear.com/support/product/rax30/
- https://www.netgear.com/support/product/rax36s/
- https://www.netgear.com/support/product/rax43/
- https://www.netgear.com/support/product/rax45/
- https://www.netgear.com/support/product/rax50/
- https://www.netgear.com/support/product/rax70/
- https://www.netgear.com/support/product/rbr760/
- https://www.netgear.com/support/product/rbs760/
- https://www.netgear.com/support/product/rs100/
- https://www.netgear.com/support/product/rs200/
- https://www.netgear.com/support/product/rs280/
- https://www.netgear.com/support/product/rs300/
- https://www.netgear.com/support/product/rs500/
- https://www.netgear.com/support/product/rs600/
- https://www.netgear.com/support/product/rs70/
- https://www.netgear.com/support/product/rs90/
Timeline
- nvd_ingest NVD