Description
An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized commands on the router. This vulnerability could affect the confidentiality, integrity, and availability of the affected router. It applies only when the Block Sites feature is turned on.
Published: 2026-10-13
Score: 6.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Patch Immediately
AI Analysis

Impact

An insufficient input validation flaw in the website blocking feature permits an attacker who can access the local network—such as one with WiFi credentials—to execute unauthorized commands on the router. This flaw can compromise confidentiality, integrity, and availability, effectively allowing an attacker to take full control of the device. The weakness is a classic input validation failure (CWE‑20).

Affected Systems

NETGEAR routers with the Block Sites feature enabled are vulnerable. The affected models are the CAX30 (firmware V2.3.4.12), RAX30 (V1.0.14.108), RAX5 (V1.0.5.34, End‑of‑Support), and RAXE300 (V1.0.10.72). Firmware versions listed above include the fix; devices running older firmware are at risk.

Risk and Exploitability

The CVSS score of 6.3 indicates a moderate severity, but the vulnerability allows for complete remote compromise of the router when the Block Sites feature is activated. Because EPSS data is unavailable and the flaw is not catalogued in CISA KEV, the current exploitation likelihood is unclear, yet the local network context presents a realistic attack vector for an insider or compromised device. Mitigating this risk requires immediate firmware patching or disabling the vulnerable feature.

Generated by OpenCVE AI on October 13, 2026 at 17:28 UTC.

Remediation

Vendor Solution

Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in: ProductFixed VersionCAX30 Nighthawk AX6 6-Stream WiFi 6 Cable Modem Router V2.3.4.12 https://www.netgear.com/support/product/cax30/ RAX30 Nighthawk AX5 5-Stream AX2400 WiFi 6 Router V1.0.14.108 https://www.netgear.com/support/product/rax30/ RAX5 (EoS) 4-Stream AX1600 WiFi 6 Router V1.0.5.34 https://www.netgear.com/support/product/rax5/ RAXE300 Nighthawk AXE7800 Tri-Band WiFi 6E Router V1.0.10.72 https://www.netgear.com/support/product/raxe300/ Models marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.

OpenCVE Recommended Actions

  • Update the firmware on all affected devices to the latest version provided by NETGEAR.
  • If a firmware update is not yet available or cannot be applied, disable the Block Sites feature in the router’s web interface to eliminate the attack surface.
  • Because the RAX5 is End‑of‑Support, plan to retire it and replace it with a newer NETGEAR device that receives ongoing security updates.

Generated by OpenCVE AI on October 13, 2026 at 17:28 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 16 Oct 2026 14:15:00 +0000

Type Values Removed Values Added
References

Tue, 13 Oct 2026 17:45:00 +0000

Type Values Removed Values Added
First Time appeared Netgear
Netgear cax30
Netgear rax30
Netgear rax5
Netgear raxe300
Vendors & Products Netgear
Netgear cax30
Netgear rax30
Netgear rax5
Netgear raxe300

Tue, 13 Oct 2026 17:00:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Tue, 13 Oct 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 15:00:00 +0000

Type Values Removed Values Added
Description An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized commands on the router. This vulnerability could affect the confidentiality, integrity, and availability of the affected router. It applies only when the Block Sites feature is turned on.
Title Insufficient input validation vulnerability exists in website blocking feature of certain NETGEAR RAX/CAX series models
Weaknesses CWE-20
References
Metrics cvssV4_0

{'score': 6.3, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber'}

Subscriptions

Netgear Cax30 Rax30 Rax5 Raxe300
cve-icon MITRE

Status: PUBLISHED

Assigner: NETGEAR

Published:

Updated: 2026-10-16T14:10:44.857Z

Reserved: 2026-06-09T02:46:41.216Z

Link: CVE-2026-11732

cve-icon Vulnrichment

Updated: 2026-10-13T15:40:46.507Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-13T15:17:43.657

Modified: 2026-10-16T14:17:24.213

Link: CVE-2026-11732

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-13T17:30:14Z

Weaknesses
  • CWE-20

    Improper Input Validation