EUVD-2026-56190
GHSA-cq62-j5fx-xhmv
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber
Administrator credentials required (PR:H) and adjacent-network access needed (AV:A); sole impact is transient availability disruption (A:L) with no confidentiality or integrity loss.
Primary rating from Vendor (NETGEAR).
CVSS VectorVendor: NETGEAR
Lifecycle Timeline
1DescriptionCVE.org
A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.
AnalysisAI
Stack-based buffer overflow across ten NETGEAR RAX-series WiFi 6 routers allows a device administrator with adjacent network access to temporarily disrupt normal device operation, producing a transient denial-of-service. The vulnerability carries a CVSS 4.0 score of 1.1, reflecting its highly constrained attack conditions: high-privilege access and adjacent network adjacency are both required, and the only impact is a brief availability disruption with no confidentiality or integrity consequence. No public exploit code exists and the vulnerability is not listed in CISA KEV; NETGEAR has released firmware patches for all affected models.
Technical ContextAI
CWE-121 (Stack-based Buffer Overflow) identifies the root cause: input data written to a fixed-size buffer on the call stack exceeds its allocated boundary, corrupting adjacent stack memory. In this instance, the CVSS vector shows no confidentiality or integrity impact (VC:N/VI:N), indicating the overflow results in a device crash or service restart rather than arbitrary code execution or memory disclosure. The affected products - identified via CPE strings - are NETGEAR's RAX-series 802.11ax (WiFi 6) routers, specifically RAX41, RAX41v2, RAX42, RAX42v2, RAX43, RAX43v2, RAX49S, RAX50, RAX50v2, and RAX54S, all consumer and SOHO-grade devices with integrated firmware management interfaces. The adjacent attack vector (AV:A) is consistent with exploitation through LAN-side or WiFi management interfaces rather than over the public internet.
RemediationAI
NETGEAR has released firmware patches for all affected models; administrators should apply updates via the relevant product support pages: RAX41 at https://www.netgear.com/support/product/rax41/, RAX41v2 at https://www.netgear.com/support/product/rax41v2/, RAX42 at https://www.netgear.com/support/product/rax42/, RAX42v2 at https://www.netgear.com/support/product/rax42v2/, RAX43 at https://www.netgear.com/support/product/rax43/, RAX43v2 at https://www.netgear.com/support/product/rax43v2/, RAX49S at https://www.netgear.com/support/product/rax49s/, RAX50 at https://www.netgear.com/support/product/rax50/, and RAX50v2 at https://www.netgear.com/support/product/rax50v2/. Exact patched firmware version numbers are not specified in available data and must be confirmed on each support page. Given the very low severity and administrator-only exploitation requirement, patching can be deferred to a routine maintenance window. As an interim compensating control, restricting management interface access to a dedicated trusted management VLAN and enforcing strong, unique administrator credentials limits the population of users who could trigger the overflow.
Command injection in NETGEAR Nighthawk routers and mesh systems (spanning MR, MS, RAX, RS, and XR series) enables a netw
Insufficient input validation across 30+ NETGEAR router, range extender, and mesh networking models enables local networ
Insufficient input validation in NETGEAR RAX-series Wi-Fi 6 routers allows authenticated local-network administrators to
Integrity tampering in NETGEAR router and mesh network firmware allows authenticated administrators on the local network
Stack-based buffer overflow in NETGEAR RAX-series and XR-series routers enables an authenticated administrator, operatin
Stack-based buffer overflow in multiple NETGEAR router models (R7000, RAX and XR series) allows an authenticated admin u
Integrity controls on multiple NETGEAR router firmware lines can be subverted by authenticated administrators on the loc
Stack-based buffer overflow in multiple NETGEAR consumer and prosumer router and mesh system models enables an authentic
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today