CVE-2025-12945

High · 7.2

CVSS

7.2

EPSS

1.2%

Published

Dec 9, 2025

CISA due date

—

The record

A vulnerability in NETGEAR Nighthawk R7000P routers lets an authenticated admin execute OS command injections due to improper input validation. This issue affects R7000P: through 1.3.3.154.

Affected packages

Ecosystem	Package	Introduced	Fixed