CVE detail
CVE-2026-0420
An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting the product's confidentiality. This vulnerability affects the listed NETGEAR models.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 17.9 · diversity 10.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
5 source links · newest first
- https://www.netgear.com/support/product/rax40/www.netgear.com
No excerpt available.
Patchwww.netgear.comJun 9, 2026, 5:17 PM - https://www.netgear.com/support/product/rax38/www.netgear.com
No excerpt available.
Patchwww.netgear.comJun 9, 2026, 5:17 PM - https://www.netgear.com/support/product/rax35/www.netgear.com
No excerpt available.
Patchwww.netgear.comJun 9, 2026, 5:17 PM - https://www.netgear.com/support/product/rax120v2/www.netgear.com
No excerpt available.
Patchwww.netgear.comJun 9, 2026, 5:17 PM No excerpt available.
Vendor Advisorykb.netgear.comJun 9, 2026, 5:17 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2023-27358CVSS 8.8 · High
NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installati…
- CVE-2021-45493CVSS 7.6 · High
Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RAX35 before 1.0.4.102, RAX38 before 1.0.4.102, and RAX40 before 1.0.4.102.
- CVE-2021-41449CVSS 7.1 · High
A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive restri…
- CVE-2021-38526CVSS 4.3 · Medium
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX35 before 1.0.3.94, RAX38 before 1.0.3.94, and RAX40 before 1.0.3.94.
- CVE-2022-48196CVSS 7.4 · High
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX40 before 1.0.2.60, RAX35 before 1.0.2.60, R6400v2 before 1.0.4.122, R670…
- CVE-2026-9212CVSS 5.6 · Medium
Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentialit…