https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:34:03 +0000 https://vulnerability.circl.lu/vuln/bdu:2025-15936 bdu:2025-15936 https://vulnerability.circl.lu/vuln/bdu:2025-15936 https://vulnerability.circl.lu/vuln/fkie_cve-2025-12943 <p>Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band WiFi 6E Router) allows attackers with the ability to intercept and tamper traffic destined to the device to execute arbitrary commands on the device.</p> <p>Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update to the latest.</p> <p>Fixed in:</p> <p>RAX30 firmware 1.0.14.108 or later.</p> <p>RAXE300 firmware 1.0.9.82 or later</p> <p>Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band WiFi 6E Router) allows attackers with the ability to intercept and tamper traffic destined to the device to execute arbitrary commands on the device.</p> <p>Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update to the latest.</p> <p>Fixed in:</p> <p>RAX30 firmware 1.0.14.108 or later.</p> <p>RAXE300 firmware 1.0.9.82 or later</p> https://vulnerability.circl.lu/vuln/fkie_cve-2025-12943 https://vulnerability.circl.lu/vuln/ghsa-gvh9-7g44-g9mq <p>Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band WiFi 6E Router) allows attackers with the ability to intercept and tamper traffic destined to the device to execute arbitrary commands on the device.</p> <p>Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update to the latest.</p> <p>Fixed in:</p> <p>RAX30 firmware 1.0.14.108 or later.</p> <p>RAXE300 firmware 1.0.9.82 or later</p> <p>Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band WiFi 6E Router) allows attackers with the ability to intercept and tamper traffic destined to the device to execute arbitrary commands on the device.</p> <p>Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update to the latest.</p> <p>Fixed in:</p> <p>RAX30 firmware 1.0.14.108 or later.</p> <p>RAXE300 firmware 1.0.9.82 or later</p> https://vulnerability.circl.lu/vuln/ghsa-gvh9-7g44-g9mq