AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

AND
     OR
          *cpe:2.3:o:netgear:rax120_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.2.9.52
     OR
          cpe:2.3:h:netgear:rax120:-:*:*:*:*:*:*:*
          cpe:2.3:h:netgear:rax120:1.0:*:*:*:*:*:*:*
          cpe:2.3:h:netgear:rax120:2.0:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:netgear:rax35_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.0.6.106
     OR
          cpe:2.3:h:netgear:rax35:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:netgear:rax38_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.0.6.106
     OR
          cpe:2.3:h:netgear:rax38:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:netgear:rax40_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.0.6.106
     OR
          cpe:2.3:h:netgear:rax40:-:*:*:*:*:*:*:*

Netgear, Inc.: https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory Types: Vendor Advisory

Netgear, Inc.: https://www.netgear.com/support/product/rax120v2/ Types: Product

Netgear, Inc.: https://www.netgear.com/support/product/rax35/ Types: Product

Netgear, Inc.: https://www.netgear.com/support/product/rax38/ Types: Product

Netgear, Inc.: https://www.netgear.com/support/product/rax40/ Types: Product

{"timestamp":"2026-06-09T17:22:54.642384Z","id":"CVE-2026-0420","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"NETGEAR","product":"RAX120v1","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"V1.2.9.52","versionType":"custom","status":"affected"}]},{"vendor":"NETGEAR","product":"RAX120v2","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"V1.2.9.52","versionType":"custom","status":"affected"}]},{"vendor":"NETGEAR","product":"RAX35","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"V1.0.6.106","versionType":"custom","status":"affected"}]},{"vendor":"NETGEAR","product":"RAX38","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"V1.0.6.106","versionType":"custom","status":"affected"}]},{"vendor":"NETGEAR","product":"RAX40","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"V1.0.6.106","versionType":"custom","status":"affected"}]}]

An improper implementation of TLS certificate validation vulnerability found in ReadyCloud client app which can allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting product's confidentiality. This vulnerability affects the listed NETGEAR models.

An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting the product's confidentiality. This vulnerability affects the listed NETGEAR models.

https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory

An improper implementation of TLS certificate validation vulnerability found in ReadyCloud client app which can allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting product's confidentiality. This vulnerability affects the listed NETGEAR models.

AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CWE-325

https://www.netgear.com/support/product/rax120v2/

https://www.netgear.com/support/product/rax35/

https://www.netgear.com/support/product/rax38/

https://www.netgear.com/support/product/rax40/