CVE-2026-62658 is an input validation vulnerability (CWE-20) in NETGEAR Nighthawk RAX series routers, specifically the RAX43. It allows an authenticated user with high privileges to run unauthorized commands or code on the router due to insufficient validation of input data. The vulnerability requires local authentication and does not involve user interaction. The CVSS 4.0 base score is 4.7, indicating medium severity. No vendor advisory or patch information is currently available, and no known exploits have been reported.

An attacker who is already authenticated with high privileges on the affected NETGEAR RAX43 router could exploit this vulnerability to execute unauthorized commands or code. This could lead to unauthorized control or manipulation of the router's functions. However, the attack requires prior authentication, which limits the risk to users who have secure access controls in place. There is no indication of remote unauthenticated exploitation or user interaction needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the router's administrative interface to trusted users only and monitor for any unusual activity. Follow NETGEAR's official communications for updates on patches or mitigations.