Missing Authentication Vulnerability in NETGEAR Nighthawk RAX30 models
Historical advisory recorded 11 Nov 2026 12:57:25 UTC. Read the latest advisory.
cve-program · CVE-2026-123180
PublishedA missing authentication vulnerability in the listed NETGEAR RAX models allows an network adjacent attacker who has authenticated to wifi network to obtain sensitive information and tamper with device configuration, including administrator credentials, without authenticating to the device. This affects the confidentiality, integrity and availability of the router.
Read the publisher's advisoryAffected versions, risk and source history
cve-program · CVE-2026-123180
PublishedMissing Authentication Vulnerability in NETGEAR Nighthawk RAX30 models
A missing authentication vulnerability in the listed NETGEAR RAX models allows an network adjacent attacker who has authenticated to wifi network to obtain sensitive information and tamper with device configuration, including administrator credentials, without authenticating to the device. This affects the confidentiality, integrity and availability of the router.
- Source published
- 10 Nov 2026 16:03:43 UTC
- Source modified
- 11 Nov 2026 11:40:01 UTC
- Saved here
- 11 Nov 2026 12:57:25 UTC
- Source terms
- CVE Program Terms of Use
Original source record · Cite this exact observation · Complete original publisher JSON
Source: cve-program · CVE Program Terms of Use. The publisher's wording is preserved. ChangeIntel groups the information and labels changes. The JSON record includes additional source fields.
CVSS 4.0 · 6.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber
CVSS 3.1 · 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H