CVE-2025-50526

Critical · 9.8

CVSS

9.8

EPSS

1.2%

Published

Dec 23, 2025

CISA due date

—

The record

Netgear EX8000 V1.0.0.126 was discovered to contain a command injection vulnerability via the switch_status function.

Ecosystem	Package	Introduced	Fixed