NETGEAR Multiple Routers and APs Vulnerabilities and Patches Advisory

Here is a summary of the key vulnerability information from the webpage screenshot: --- Vulnerability Overview The NETGEAR Product Security Team has identified multiple security vulnerabilities across several products, including input validation flaws, Denial of Service (DoS) vulnerabilities, command injection issues, and certificate verification problems. Some of these vulnerabilities allow unauthorized users to perform malicious actions or render devices unavailable. --- Scope of Impact and Remediation 1. CVE-2026-15757 — NETGEAR DGND3700v1 Modem Router Severity: Medium Affected Products: DGND3700v1 Remediation: This product has reached end-of-support and will not receive security updates. We recommend replacing it with a newer model. --- 2. CVE-2026-62655 — DoS Vulnerability (Stack Overflow) in Specific Orbi Models Severity: Medium Affected Products: - RBR860, RBR950, RBRE260, RBE970, RBE971 - RB5860, RB5E950, RB5E960 Remediation: - Enable automatic updates or manually upgrade to the following versions: - RBE970 / RBE971 → v9.10.14 - RBR860 / RBRE950 / RBRE960 / RB5860 / RB5E950 / RB5E960 → v7.2.735 --- 3. CVE-2026-62656 — Post-Authentication Command Injection in Specific RAX Models Severity: Medium Affected Products: RAXE450, RAXE500 Remediation: - Enable automatic updates or manually upgrade to v1.2.16.114 --- 4. CVE-2026-62657 — Certificate Verification Vulnerability (Gaming Router & Nighthawk) Severity: Medium Affected Products: - MR70, M570, RAXE500, XR1000 Remediation: - Enable automatic updates or manually upgrade to: - MR70 / M570 → v1.0.4.48 - RAXE500 → v1.2.16.114 - XR1000 → v1.0.2.86 --- 5. CVE-2026-62658 — Post-Authentication Command Injection in Nighthawk RAX Series Severity: Medium Affected Products: - RAX43, RAX45, RAX50, RAX54S, RAX54Sv2 Remediation: - Enable automatic updates or manually upgrade to: - RAX43(EoS), RAX45(EoS), RAX50, RAX54S, RAX54Sv2 → v1.0.17.162 - Note: RAX43(EoS) and RAX45(EoS) have reached end-of-support; device replacement is recommended. --- 6. CVE-2026-62659 — Unauthorized Configuration Change on WAX333 Access Point Severity: Medium Affected Products: WAX333 Remediation: - Enable automatic updates or manually upgrade to v12.8.0.100 --- > ⚠️ Enabling automatic firmware updates is recommended for all vulnerabilities. If not enabled, please check and manually upgrade to the specified versions. > 📌 Disclaimer: The document is provided "as is." NETGEAR assumes no responsibility for any consequences and reserves the right to modify this information at any time. --- (Note: The page does not contain Proof of Concept (PoC) or exploit code.)

Goal Reached Thanks to every supporter — we hit 100%!

NETGEAR Multiple Routers and APs Vulnerabilities and Patches Advisory