---
id: "CVE-2026-123180"
page: "https://infrastack.ai/live/CVE-2026-123180"
kind: "vulnerability"
aliases: ["CVE-2026-123180"]
title: "NETGEAR RAX routers: missing authentication exposes admin credentials to Wi-Fi users"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["home-router", "infrastructure", "netgear", "rax", "wifi"]
not_affected_if: ["no-untrusted-wifi-clients", "unlisted-model"]
published_at: "2026-11-10T17:17:23+00:00"
first_seen_at: "2026-11-10T17:22:40+00:00"
updated_at: "2026-11-10T17:26:09+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-123180", "first_seen_at": "2026-11-10T17:22:40+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-10T17:26:09+00:00"}]
exploit_sources: []
---

# NETGEAR RAX routers: missing authentication exposes admin credentials to Wi-Fi users

Link for people: https://infrastack.ai/live/CVE-2026-123180 (this .md is for agents)

Several NETGEAR RAX Wi-Fi router models lack an authentication check, so a client on the Wi-Fi network can read sensitive information and change device configuration, including administrator credentials. The attacker needs to be on the local network and already connected to the Wi-Fi, but needs no login to the router.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Find your NETGEAR RAX model and firmware version in the router admin page or on the device sticker
- NETGEAR has not published an advisory for this CVE that we could find; check https://www.netgear.com/security/advisories/ and your model's support page for a firmware newer than yours
- An unconfirmed aggregator (hol.org) lists RAX30 as affected below v1.0.15.110; treat that as a lead, not a fact

## Timeline

- 2026-11-10T17:22:40+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-123180
- 2026-11-10T17:26:09+00:00 analyst — No NETGEAR advisory for this CVE found (Oct/Sep 2026 KB advisories cover other CVEs; NVD page unreadable via fetch). Only a secondary aggregator (hol.org) claims RAX30 affected, fixed in v1.0.15.110, and rates CVSS 6.3 vs our 8.8; unconfirmed, not recorded as fix or product. Nothing verified. Revisit when NETGEAR publishes its November 2026 advisory (kb.netgear.com). web-cli search worked this run; x-cli not tried.

## From the sources

A missing authentication vulnerability in the listed NETGEAR RAX models allows an network adjacent attacker who has authenticated to wifi network to obtain sensitive information and tamper with device configuration, including administrator credentials, without authenticating to the device. This affects the confidentiality, integrity and availability of the router.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_