Netgear Raxe300 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Netgear Raxe300 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2023-27358 — CVSS 8.8 (high): NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to…
• CVE-2026-9211 — CVSS 8.8 (high): An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation.
• CVE-2023-27356 — CVSS 8.0 (high): NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to…
• CVE-2025-12943 — CVSS 7.5 (high): Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) and RAXE300…
• CVE-2026-9216 — CVSS 3.5 (low): An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network…