CVE-2026-0420

No fix known EPSS <1%CVSS 4.6

An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting the product's confidentiality. This vulnerability affects the listed NETGEAR models.

Published 2026-06-09 · CVE record · OSV

Products: NETGEAR RAX120v1, NETGEAR RAX120v2, NETGEAR RAX35, NETGEAR RAX38, NETGEAR RAX40