NETGEAR ReadyCloud EUVD-2026-35467

CWE-325 (Missing Required Cryptographic Step) describes a failure to perform a mandatory step in a cryptographic protocol - here, the TLS certificate validation chain. When a TLS client skips or improperly implements certificate verification, it cannot distinguish a legitimate server certificate from a forged one presented by an adversary. The ReadyCloud client app, embedded in NETGEAR Nighthawk-series routers (CPE: cpe:2.3:a:netgear:rax35, rax38, rax40, rax120v1, rax120v2), communicates with NETGEAR's ReadyCloud remote access service over TLS. The flawed validation means an attacker who can intercept the TCP/TLS session can present an arbitrary certificate and successfully negotiate a session, stripping confidentiality from the channel. The CVSS 4.0 vector confirms a network attack path (AV:N) but notes high complexity (AC:H) and additional prerequisites (AT:P), reflecting that a privileged network position - not just any internet host - is required.