Record status Published
Identifier year (not publication year) 2025
Source publication Dec 9, 2025
Source updated Feb 26, 2026
Imported by cveboard Oct 24, 2026
CNA source text (English) Improper input validation in NETGEAR Nighthawk routers
A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques (MiTM) to manipulate DNS responses and execute commands when speedtests are run.
This issue affects RS700: through 1.0.7.82; RAX54Sv2 : before V1.1.6.36; RAX41v2: before V1.1.6.36; RAX50: before V1.2.14.114; RAXE500: before V1.2.14.114; RAX41: before V1.0.17.142; RAX43: before V1.0.17.142; RAX35v2: before V1.0.17.142; RAXE450: before V1.2.14.114; RAX43v2: before V1.1.6.36; RAX42: before V1.0.17.142; RAX45: before V1.0.17.142; RAX50v2: before V1.1.6.36; MR90: before V1.0.2.46; MS90: before V1.0.2.46; RAX42v2: before V1.1.6.36; RAX49S: before V1.1.6.36.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
RS700
Vendor NETGEAR
Product RS700
Platforms Unknown
Default status unaffected
RS700 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0 affectedcustom Unavailable 1.0.7.82 None listed
RAX54Sv2
Vendor NETGEAR
Product RAX54Sv2
Platforms Unknown
Default status unaffected
RAX54Sv2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0 affectedcustom V1.1.6.36 Unavailable None listed
RAX41v2
Vendor NETGEAR
Product RAX41v2
Platforms Unknown
Default status unaffected
RAX41v2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0 affectedcustom V1.1.6.36 Unavailable None listed
RAX50
Vendor NETGEAR
Product RAX50
Platforms Unknown
Default status unaffected
RAX50 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0 affectedcustom V1.2.14.114 Unavailable None listed
RAXE500
Vendor NETGEAR
Product RAXE500
Platforms Unknown
Default status unaffected
RAXE500 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0 affectedcustom V1.2.14.114 Unavailable None listed
RAX41
Vendor NETGEAR
Product RAX41
Platforms Unknown
Default status unaffected
RAX41 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0 affectedcustom V1.0.17.142 Unavailable None listed
RAX43
Vendor NETGEAR
Product RAX43
Platforms Unknown
Default status unaffected
RAX43 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0 affectedcustom V1.0.17.142 Unavailable None listed
RAX35v2
Vendor NETGEAR
Product RAX35v2
Platforms Unknown
Default status unaffected
RAX35v2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0 affectedcustom V1.0.17.142 Unavailable None listed
RAXE450
Vendor NETGEAR
Product RAXE450
Platforms Unknown
Default status unaffected
RAXE450 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0 affectedcustom V1.2.14.114 Unavailable None listed
RAX43v2
Vendor NETGEAR
Product RAX43v2
Platforms Unknown
Default status unaffected
RAX43v2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0 affectedcustom V1.1.6.36 Unavailable None listed
RAX42
Vendor NETGEAR
Product RAX42
Platforms Unknown
Default status unaffected
RAX42 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0 affectedcustom V1.0.17.142 Unavailable None listed
RAX45
Vendor NETGEAR
Product RAX45
Platforms Unknown
Default status unaffected
RAX45 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0 affectedcustom V1.0.17.142 Unavailable None listed
RAX50v2
Vendor NETGEAR
Product RAX50v2
Platforms Unknown
Default status unaffected
RAX50v2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0 affectedcustom V1.1.6.36 Unavailable None listed
MR90
Vendor NETGEAR
Product MR90
Platforms Unknown
Default status unaffected
MR90 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0 affectedcustom V1.0.2.46 Unavailable None listed
RAX42v2
Vendor NETGEAR
Product RAX42v2
Platforms Unknown
Default status unaffected
RAX42v2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0 affectedcustom V1.1.6.36 Unavailable None listed
RAX49S
Vendor NETGEAR
Product RAX49S
Platforms Unknown
Default status unaffected
RAX49S · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0 affectedcustom V1.1.6.36 Unavailable None listed
MS90
Vendor NETGEAR
Product MS90
Platforms Unknown
Default status unaffected
MS90 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0 affectedcustom V1.0.2.46 Unavailable None listed