Input Validation Flaw in NETGEAR Nighthawk Routers' Speedtest Feature

CVE-2025-12946

What is CVE-2025-12946?

A vulnerability exists in the speedtest feature of certain NETGEAR Nighthawk routers due to improper input validation. This flaw allows attackers on the router's WAN side to exploit attacker-in-the-middle techniques, enabling them to manipulate DNS responses and execute arbitrary commands during speed tests. Users of affected Nighthawk router models should ensure their devices are updated to the latest firmware version to mitigate this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References