CVE-2025-12946

Improper input validation in NETGEAR Nighthawk routers

State: Published
Severity: 4.4 Medium
Published: Dec 9, 2025
Updated: Feb 26, 2026
Reserved: Nov 10, 2025

Description

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques (MiTM) to manipulate DNS responses and execute commands when speedtests are run.

This issue affects RS700: through 1.0.7.82; RAX54Sv2 : before V1.1.6.36; RAX41v2: before V1.1.6.36; RAX50: before V1.2.14.114; RAXE500: before V1.2.14.114; RAX41: before V1.0.17.142; RAX43: before V1.0.17.142; RAX35v2: before V1.0.17.142; RAXE450: before V1.2.14.114; RAX43v2: before V1.1.6.36; RAX42: before V1.0.17.142; RAX45: before V1.0.17.142; RAX50v2: before V1.1.6.36; MR90: before V1.0.2.46; MS90: before V1.0.2.46; RAX42v2: before V1.1.6.36; RAX49S: before V1.1.6.36.

Scores

CVSS	Score	Vector	Source
4.0	4.4 Medium	CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/S:N/AU:N/R:A/V:D/RE:M/U:Amber	NETGEAR

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
RS700NETGEAR	1.0.7.82 and earlierAffected
RAX54Sv2NETGEAR	before V1.1.6.36Affected
RAX41v2NETGEAR	before V1.1.6.36Affected
RAX50NETGEAR	before V1.2.14.114Affected
RAXE500NETGEAR	before V1.2.14.114Affected
RAX41NETGEAR	before V1.0.17.142Affected
RAX43NETGEAR	before V1.0.17.142Affected
RAX35v2NETGEAR	before V1.0.17.142Affected
RAXE450NETGEAR	before V1.2.14.114Affected
RAX43v2NETGEAR	before V1.1.6.36Affected
RAX42NETGEAR	before V1.0.17.142Affected
RAX45NETGEAR	before V1.0.17.142Affected
RAX50v2NETGEAR	before V1.1.6.36Affected
MR90NETGEAR	before V1.0.2.46Affected
RAX42v2NETGEAR	before V1.1.6.36Affected
RAX49SNETGEAR	before V1.1.6.36Affected
MS90NETGEAR	before V1.0.2.46Affected

References

https://www.netgear.com/support/product/rs700productpatch
https://www.netgear.com/support/product/rax54sv2productpatch
https://www.netgear.com/support/product/rax41v2productpatch
https://www.netgear.com/support/product/RAX50productpatch
https://www.netgear.com/support/product/raxe500productpatch
https://www.netgear.com/support/product/rax41productpatch
https://www.netgear.com/support/product/rax43productpatch
https://www.netgear.com/support/product/rax35v2productpatch
https://www.netgear.com/support/product/raxe450productpatch
https://www.netgear.com/support/product/rax43v2productpatch
https://www.netgear.com/support/product/rax42productpatch
https://www.netgear.com/support/product/rax45productpatch
https://www.netgear.com/support/product/rax50v2productpatch
https://www.netgear.com/support/product/mr90productpatch
https://www.netgear.com/support/product/ms90productpatch
https://www.netgear.com/support/product/rax42v2productpatch
https://www.netgear.com/support/product/rax49sproductpatch
https://kb.netgear.com/000070416/December-2025-NETGEAR-Security-Advisoryvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.