AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2025-12946.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSMEDIUM / 4.4CVSS 4.0 · a2826606-91e7-4eb6-899e-8484bd4575d5
EXPLOITATION STATUSNot listed in the cached KEV catalogThis does not establish absence of exploitation.
RECORD STATUSAnalyzedModified Oct 07, 2026

Disclosure summary

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques (MiTM) to manipulate DNS responses and execute commands when speedtests are run. This issue affects RS700: through 1.0.7.82; RAX54Sv2 : before V1.1.6.36; RAX41v2: before V1.1.6.36; RAX50: before V1.2.14.114; RAXE500: before V1.2.14.114; RAX41: before V1.0.17.142; RAX43: before V1.0.17.142; RAX35v2: before V1.0.17.142; RAXE450: before V1.2.14.114; RAX43v2: before V1.1.6.36; RAX42: before V1.0.17.142; RAX45: before V1.0.17.142; RAX50v2: before V1.1.6.36; MR90: before V1.0.2.46; MS90: before V1.0.2.46; RAX42v2: before V1.1.6.36; RAX49S: before V1.1.6.36.

Source-reported weakness categories

CWE-20, NVD-CWE-noinfo

Source-specific records & product guidance

Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.

NIST National Vulnerability Database · NVD-CVE-2025-12946

Open original source · Updated Oct 07, 2026

Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.

VendorProduct / associationVersion / bounds
netgearrs700_firmware* {"versionEndExcluding":"1.0.9.6"}
netgearrax54sv2_firmware* {"versionEndExcluding":"1.1.6.36"}
netgearrax45v2_firmware* {"versionEndExcluding":"1.1.6.36"}
netgearrax41v2_firmware* {"versionEndExcluding":"1.1.6.36"}
netgearrax50_firmware* {"versionEndExcluding":"1.2.14.114"}
netgearraxe500_firmware* {"versionEndExcluding":"1.2.14.114"}
netgearrax41_firmware* {"versionEndExcluding":"1.0.17.142"}
netgearrax43_firmware* {"versionEndExcluding":"1.0.17.142"}
netgearrax35v2_firmware* {"versionEndExcluding":"1.0.17.142"}
netgearraxe450_firmware* {"versionEndExcluding":"1.0.17.142"}
netgearrax43v2_firmware* {"versionEndExcluding":"1.1.6.36"}
netgearrax42_firmware* {"versionEndExcluding":"1.0.17.142"}
netgearrax45_firmware* {"versionEndExcluding":"1.0.17.142"}
netgearrax50v2_firmware* {"versionEndExcluding":"1.1.6.36"}
netgearmr90_firmware* {"versionEndExcluding":"1.0.2.46"}
netgearms90_firmware* {"versionEndExcluding":"1.0.2.46"}
netgearrax42v2_firmware* {"versionEndExcluding":"1.1.6.36"}
netgearrax49s_firmware* {"versionEndExcluding":"1.1.6.36"}

Original records & references

PUBLISHED 2025-12-09T12:15:48-05:00
MODIFIED 2026-10-07T07:10:00-04:00
INGESTED 2026-10-08T12:35:37-04:00