Input Validation Flaw in NETGEAR Nighthawk Routers' Speedtest Feature

CVE-2025-12946

What is CVE-2025-12946?

A vulnerability exists in the speedtest feature of certain NETGEAR Nighthawk routers due to improper input validation. This flaw allows attackers on the router's WAN side to exploit attacker-in-the-middle techniques, enabling them to manipulate DNS responses and execute arbitrary commands during speed tests. Users of affected Nighthawk router models should ensure their devices are updated to the latest firmware version to mitigate this vulnerability.

References