CVE-2026-62656

Deferred Deferred - Pending Action

Command Injection in NETGEAR RAX Series Routers

Publication date: 2026-07-14

Last updated on: 2026-07-15

Assigner: Netgear, Inc.

Description

A security flaw was found in certain NETGEAR RAX models that could allow a logged-in user to send specially crafted requests to the router and run unauthorized commands. This could enable the user to make unauthorized changes to the router and affect its security and operation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-14

Last Modified

2026-07-15

Generated

2026-08-04

AI Q&A

2026-07-15

EPSS Evaluated

2026-08-02

NVD

CVE-2026-62656

EUVD

EUVD-2026-44328

Affected Vendors & Products

Vendor	Product	Version / Range
netgear	rax	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This vulnerability is a security flaw in certain NETGEAR RAX router models. A logged-in user can send specially crafted requests to execute unauthorized commands on the router. This could allow changes to the router's settings and compromise its security and operation.

Detection Guidance

Detecting this vulnerability requires checking for unauthorized command execution on affected NETGEAR RAX routers. Monitor router logs for unusual requests or commands. Use network scanning tools to identify vulnerable devices by checking firmware versions and model numbers.

Impact Analysis

An attacker with login access could alter router configurations, disrupt network operations, or gain further access to connected devices. This may lead to data breaches, unauthorized network use, or loss of control over the router.

Compliance Impact

This vulnerability could lead to unauthorized access or data exfiltration, violating confidentiality requirements in GDPR and HIPAA. Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Immediately update the router firmware to the latest version provided by NETGEAR. Disable remote administration if not required. Restrict user access to the minimum necessary privileges. Monitor router logs for suspicious activity.

Hi! I’m here to help you understand CVE-2026-62656. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70