{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "NETGEAR RAX30: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/netgear--rax30/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/netgear--rax30/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-11732/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-11732/",
   "title": "CVE-2026-11732 · netgear cax30 · disclosed",
   "content_text": "An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized commands on the router. This vulnerability could affect the confidentiality, integrity, and availability of the affected router. It applies only when the Block Sites feature is turned on.",
   "date_published": "2026-10-13T14:42:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-11731/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-11731/",
   "title": "CVE-2026-11731 · NETGEAR RAX30 · disclosed",
   "content_text": "An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the confidentiality and integrity of management data and the availability of device-management functions.",
   "date_published": "2026-10-13T14:41:42Z"
  }
 ]
}