Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers

Summary

A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality.

Timeline

1. Aug 11, 2026, 3:06 PM UTCCVE published
2. Aug 11, 2026, 5:06 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: partial

3. Aug 12, 2026, 7:36 AM UTCRecord last updated

Affected versions

• NETGEAR RAX20

  All versions

• NETGEAR RAX35v2

  fixed in V1.0.16.132

• NETGEAR RAX41

  All versions

• NETGEAR RAX41v2

  fixed in V1.1.4.28

• NETGEAR RAX42

  All versions

• NETGEAR RAX42v2

  fixed in V1.1.4.28

• NETGEAR RAX43

  fixed in V1.0.16.132

• NETGEAR RAX43v2

  fixed in V1.1.4.28

• NETGEAR RAX45

  All versions

• NETGEAR RAX49S

  fixed in V1.1.4.28

• NETGEAR RAX50

  fixed in V1.0.16.132

• NETGEAR RAX50S

  All versions

• NETGEAR RAX50v2

  fixed in V1.1.4.28

• NETGEAR RAX54Sv2

  fixed in V1.1.4.28

• NETGEAR RAX54v2

  fixed in V1.1.4.28

• NETGEAR RAXE450

  All versions

• NETGEAR RAXE500

  fixed in V1.2.14.114

• NETGEAR XR1000

  fixed in V1.1.0.22

• NETGEAR XR1000v2

  fixed in V1.1.0.22

References 19