CVE-2025-12943Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band WiFi 6E Router) allows attackers with t…
Updated under an hour ago ()
Does this affect you?
It affects netgear rax30_firmware and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band WiFi 6E Router) allows attackers with the ability to intercept and tamper traffic destined to the device to execute arbitrary commands on the device. Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update to the latest. Fixed in: RAX30 firmware 1.0.14.108 or later. RAXE300 firmware 1.0.9.82 or later
- CVSS
- 7.5 HIGH (v3.1, NVD)CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-295
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Not given
- NVD analysis
- Analyzed
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
netgear rax30_firmware netgear:rax30_firmware | before 1.0.14.108 | NVD |
netgear raxe300_firmware netgear:raxe300_firmware | before 1.0.9.82 | NVD |
References
- https://kb.netgear.com/000070355/NETGEAR-Security-Advisories-November-2025vendor-advisory
- https://www.netgear.com/support/product/rax30product
- https://www.netgear.com/support/product/raxe300product
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.