# CVE-2025-12946: A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation… Source: https://junglewise.ai/threats/cve-2025-12946-a-vulnerability-in-the-speedtest-feature-of-affected-netgear Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Published: 2025-12-09 License: CC BY 4.0 with a link back CVE-2025-12946 · Severity: high · CVSS 7.5 · Published 2025-12-09 A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques (MiTM) to manipulate DNS responses and execute commands when speedtests are run. This issue affects RS700: through 1.0.7.82; RAX54Sv2 : before V1.1.6.36; RAX41v2: before V1.1.6.36; RAX50: before V1.2.14.114; RAXE500: before V1.2.14.114; RAX41: before V1.0.17.142; RAX43: before V1.0.17.142; RAX35v2: before V1.0.17.142; RAXE450: before V1.2.14.114; RAX43v2: before V1.1.6.36; RAX42: before V1.0.17.142; RAX45: before V1.0.17.142; RAX50v2: before V1.1.6.36; MR90: before V1.0.2.46; MS90: before V1.0.2.46; RAX42v2: before V1.1.6.36; RAX49S: before V1.1.6.36. Technologies: [NETGEAR RAX35v2](https://junglewise.ai/threats/technologies/rax35v2), [NETGEAR RAX41](https://junglewise.ai/threats/technologies/rax41), [NETGEAR Rax41 Firmware](https://junglewise.ai/threats/technologies/rax41-firmware), [NETGEAR RAX41v2](https://junglewise.ai/threats/technologies/rax41v2), [NETGEAR Rax41v2 Firmware](https://junglewise.ai/threats/technologies/rax41v2-firmware), [NETGEAR RAX42](https://junglewise.ai/threats/technologies/rax42), [NETGEAR Rax42 Firmware](https://junglewise.ai/threats/technologies/rax42-firmware), [NETGEAR RAX42v2](https://junglewise.ai/threats/technologies/rax42v2), [NETGEAR Rax42v2 Firmware](https://junglewise.ai/threats/technologies/rax42v2-firmware), [NETGEAR RAX43](https://junglewise.ai/threats/technologies/rax43), [NETGEAR Rax43 Firmware](https://junglewise.ai/threats/technologies/rax43-firmware), [NETGEAR RAX43v2](https://junglewise.ai/threats/technologies/rax43v2), [NETGEAR Rax43v2 Firmware](https://junglewise.ai/threats/technologies/rax43v2-firmware), [NETGEAR RAX45](https://junglewise.ai/threats/technologies/rax45), [NETGEAR Rax45 Firmware](https://junglewise.ai/threats/technologies/rax45-firmware), [NETGEAR RAX49s](https://junglewise.ai/threats/technologies/rax49s), [NETGEAR Rax49s Firmware](https://junglewise.ai/threats/technologies/rax49s-firmware), [NETGEAR RAX50](https://junglewise.ai/threats/technologies/rax50), [NETGEAR Rax50 Firmware](https://junglewise.ai/threats/technologies/rax50-firmware), [NETGEAR RAX50v2](https://junglewise.ai/threats/technologies/rax50v2), [NETGEAR Rax50v2 Firmware](https://junglewise.ai/threats/technologies/rax50v2-firmware), [NETGEAR RAX54sv2](https://junglewise.ai/threats/technologies/rax54sv2), [NETGEAR Rax54sv2 Firmware](https://junglewise.ai/threats/technologies/rax54sv2-firmware), [NETGEAR RAXE450](https://junglewise.ai/threats/technologies/raxe450), [NETGEAR RAXE500](https://junglewise.ai/threats/technologies/raxe500), [NETGEAR RS700](https://junglewise.ai/threats/technologies/rs700). Vendors: [NETGEAR](https://junglewise.ai/threats/vendors/netgear). ## Quick answers **Is CVE-2025-12946 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-12946 being exploited in the wild. **How severe is CVE-2025-12946?** High severity, with a CVSS score of 7.5, published 9 December 2025. **Which products and versions are affected?** NETGEAR Mr90, NETGEAR Mr90 Firmware, NETGEAR Ms90, NETGEAR Ms90 Firmware and 32 more. The advisory does not name versions. **Is there a fix for CVE-2025-12946?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it. **Am I affected by CVE-2025-12946?** Check whether you run NETGEAR Mr90, NETGEAR Mr90 Firmware, NETGEAR Ms90 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you. ## Affected products - NETGEAR Mr90 - NETGEAR Mr90 Firmware - NETGEAR Ms90 - NETGEAR Ms90 Firmware - NETGEAR RAX35v2 - NETGEAR Rax35v2 Firmware - NETGEAR RAX41 - NETGEAR Rax41 Firmware - NETGEAR RAX41v2 - NETGEAR Rax41v2 Firmware - NETGEAR RAX42 - NETGEAR Rax42 Firmware - NETGEAR RAX42v2 - NETGEAR Rax42v2 Firmware - NETGEAR RAX43 - NETGEAR Rax43 Firmware - NETGEAR RAX43v2 - NETGEAR Rax43v2 Firmware - NETGEAR RAX45 - NETGEAR Rax45 Firmware - NETGEAR Rax45v2 - NETGEAR Rax45v2 Firmware - NETGEAR RAX49s - NETGEAR Rax49s Firmware - NETGEAR RAX50 - NETGEAR Rax50 Firmware - NETGEAR RAX50v2 - NETGEAR Rax50v2 Firmware - NETGEAR RAX54sv2 - NETGEAR Rax54sv2 Firmware - NETGEAR RAXE450 - NETGEAR Raxe450 Firmware - NETGEAR RAXE500 - NETGEAR Raxe500 Firmware - NETGEAR RS700 - NETGEAR Rs700 Firmware ## Related threats - [NETGEAR Nighthawk and Orbi routers command injection vulnerability](https://junglewise.ai/threats/cve-2026-11814-netgear-nighthawk-and-orbi-routers-command-injection) - [A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker…](https://junglewise.ai/threats/cve-2026-11739-a-command-injection-vulnerability-in-certain-affected-netgear) - [Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected…](https://junglewise.ai/threats/cve-2026-11738-insufficient-input-validation-vulnerability-in-the-listed-netgear) - [Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected…](https://junglewise.ai/threats/cve-2026-11737-insufficient-input-validation-vulnerability-in-the-listed-netgear) - [A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt…](https://junglewise.ai/threats/cve-2026-11733-a-buffer-overflow-vulnerability-in-the-listed-netgear-models)