netgear rax40 firmware

Name: netgear rax40 firmware
Brand: netgear

productUS

cpe:2.3:o:netgear:rax40_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

by severity

3critical11high11medium0low

updated 2026-10-28

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-35800US	critical9.4	1.61% (76th)	—	1.0.3.80	2020-12-30	< 1.0.3.80
CVE-2021-41449US	high7.1	1.61% (76th)	—	1.0.4.102	2021-12-09	< 1.0.4.102
CVE-2022-27647US	high8.0	1.47% (74th)	—	1.0.10.110	2023-03-29	< 1.0.10.110
CVE-2019-20646US	critical9.8	1.29% (70th)	—	1.0.3.64	2020-04-15	< 1.0.3.64
CVE-2022-27645US	high8.8OT elevated	1.28% (70th)	—	1.0.10.110	2023-03-29	< 1.0.10.110
CVE-2021-38526US	high7.5	1.02% (63rd)	—	1.0.3.94	2021-08-11	< 1.0.3.94
CVE-2022-48196US	critical9.8	0.94% (61st)	—	1.0.2.60	2022-12-30	< 1.0.2.60
CVE-2023-27358US	high8.8	0.88% (59th)	—	1.0.10.94	2024-05-03	< 1.0.10.94
CVE-2022-27642US	high8.8OT elevated	0.87% (59th)	—	1.0.10.110	2023-03-29	< 1.0.10.110
CVE-2019-20641US	high8.8	0.83% (57th)	—	1.0.3.64	2020-04-15	< 1.0.3.64
CVE-2019-20643US	high7.5	0.83% (57th)	—	1.0.3.64	2020-04-15	< 1.0.3.64
CVE-2021-45493US	high7.5	0.80% (56th)	—	1.0.4.102	2021-12-26	< 1.0.4.102
CVE-2021-45549US	medium6.8	0.63% (50th)	—	1.0.3.96	2021-12-26	< 1.0.3.96
CVE-2020-26898US	high8.8	0.60% (49th)	—	1.0.3.80	2020-10-09	< 1.0.3.80
CVE-2019-20642US	high8.0	0.54% (45th)	—	1.0.3.64	2020-04-15	< 1.0.3.64
CVE-2019-20647US	medium5.7	0.49% (42nd)	—	1.0.3.64	2020-04-15	< 1.0.3.64
CVE-2019-20645US	medium4.8	0.49% (42nd)	—	1.0.3.62	2020-04-15	< 1.0.3.62
CVE-2019-20644US	medium4.8	0.48% (42nd)	—	1.0.3.62	2020-04-15	< 1.0.3.62
CVE-2021-38533US	medium5.4	0.47% (40th)	—	1.0.3.64	2021-08-11	< 1.0.3.64
CVE-2021-38536US	medium4.8	0.46% (40th)	—	1.0.3.62	2021-08-11	< 1.0.3.62
CVE-2021-38535US	medium4.8	0.46% (40th)	—	1.0.3.62	2021-08-11	< 1.0.3.62
CVE-2021-45604US	medium4.5	0.38% (32nd)	—	1.0.3.96	2021-12-26	< 1.0.3.96
CVE-2021-45672US	medium4.8	0.38% (32nd)	—	1.0.3.62	2021-12-26	< 1.0.3.62
CVE-2026-9216US	—	0.36% (30th)	—	1.0.6.106	2026-09-08	< 1.0.6.106
CVE-2021-38537US	medium4.8	0.36% (29th)	—	1.0.3.62	2021-08-11	< 1.0.3.62
CVE-2026-0420US	medium5.9	0.14% (3rd)	—	1.0.6.106	2026-06-09	< 1.0.6.106

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-289Authentication Bypass by Alternate Name2 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-287Improper Authentication1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE26 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan