What’s Vulnerable › Vulnerabilities

CVE-2026-62659: Authenticated users can make unauthorized changes on NETGEAR WAX333 Access Points

• Severity: medium (CVSS 4.3 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-14 · updated 2026-10-24
• Weakness: CWE-20

Description

A security flaw was discovered in the NETGEAR WAX333 Access Point that could allow someone already logged in and connected to the local network to make unauthorized changes to the device's settings

Affected products

• NETGEAR WAX333: before V12.8.0.100 — fixed in V12.8.0.100

How to fix

Upgrade to a fixed version: NETGEAR WAX333 V12.8.0.100. Check the vendor advisory for mitigations.

References

• https://kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory
• https://www.netgear.com/support/product/wax333

Get alerted when CVE-2026-62659 or the next vulnerability affects your stack