CVE-2025-50526

CriticalCVSS 9.8

Published: 23/12/2025(UTC)Updated: 26/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.18%

67th percentile - higher than 67% of all known CVEs

Summary

Netgear EX8000 version V1.0.0.126 contains a command injection vulnerability via the switch_status function. The description provides no further technical details.

Risk Assessment

The vulnerability may allow an attacker to execute arbitrary commands on the device, risking compromise of the network extender and traffic. This affects the organization's network security.

Recommendation

Check for and promptly apply firmware updates for Netgear EX8000. Until updated, restrict administrative access to the device.

Other vulnerabilities in Netgear EX8000

CVE-2025-45493Medium
Netgear EX8000 V1.0.0.126 is vulnerable to command injection via the iface parameter in the action_bandwidth function. An attacker can supply a crafted parameter value that results in execution of arbitrary system commands.

Original NVD description (English source)

Netgear EX8000 V1.0.0.126 was discovered to contain a command injection vulnerability via the switch_status function.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS