CVE-2026-62659 | A security flaw was discovered in the NETGEAR WAX333 Access … | CVSS 4.3 MEDIUM

Description

A security flaw was discovered in the NETGEAR WAX333 Access Point that could allow someone already logged in and connected to the local network to make unauthorized changes to the device's settings

Metadata

CVE ID: CVE-2026-62659
State: PUBLISHED
Assigner: NETGEAR
Reserved: 2026-07-14 16:31 UTC
Published: 2026-07-14 17:48 UTC
Last updated: 2026-07-14 17:48 UTC
Primary CWE: CWE-20
CWE-20 Improper input validation
Vendor / Product: NETGEAR / WAX333
Sources: cve.org · NVD

Severity & Metrics

4.3 MEDIUM CVSS 4.0

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber

Affected products (1)

Vendor	Product	Platform	Versions
NETGEAR	WAX333	—	0 < V2.8.0.100

Weakness (CWE)

CWE	Source	Description
CWE-20	cna	CWE-20 Improper input validation

CVSS scores (1)

Score	Severity	Version	Source	Vector
4.3	MEDIUM	4.0	cna	CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber

References (1)

https://www.netgear.com/support/product/wax333