Missing Authentication Vulnerability in NETGEAR RAX Models
CVE-2026-123180

6.3MEDIUM

Key Information:

Vendor

Netgear
Status
Rax30
Vendor
CVE Published:
10 November 2026

What is CVE-2026-123180?

A vulnerability in specific NETGEAR RAX models allows an attacker within the same Wi-Fi network to access sensitive information and modify device settings, including administrator credentials, without needing to authenticate with the router. This lack of authentication poses significant risks to the privacy and security of the network, potentially compromising sensitive data and device functionality.

Affected Version(s)

RAX30 0

References

https://www.netgear.com/support/product/rax30
productpatch
https://kb.netgear.com/000070971/November-2026-NETGEAR-Se...
vendor-advisorypatch

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Gentile, Michael
.