Release Date: 
June 16, 2026

Security Fixes:

This firmware addresses security vulnerabilities. For more information about security vulnerabilities, visit https://www.netgear.com/about/security/.

Known Issues:

• SNMPv2 and SNMPv3 are supported only through the “snmpwalk” command. 

Workaround: To enable querying with “snmpwalk”, ensure the correct MIB file is copied to the directory: /usr/share/snmp/mibs/

• Changes to an SSID with NAT mode might take up to three minutes to be applied.

Workaround: Wait at least three minutes before connecting any clients.

• The access point stops responding when an Instant Captive Portal and DVLAN configuration are activated or changed in quick succession, in either order.
  Workaround: After activating either the Instant Captive Portal or the DVLAN configuration, wait a few minutes before activating the other.
• Clients connected to a captive portal that is configured on an SSID might not see the splash page for authentication when the VLAN of the SSID is the same as the management VLAN, a VLAN that is configured as a DVLAN, or a VLAN that has a Multi PSK configured.
  Workaround: For the SSID on which the captive portal is configured, use the default VLAN or a unique VLAN that is not used as the management VLAN, that is not a DVLAN, or that does not use Multi PSK.
• With the mDNS Gateway feature activated, a device running Windows might not discover certain printers.
  Workaround: Manually add the IP address of the printer on the Windows device.
• With the mDNS Gateway feature enabled, even though Apple AirPlay services are discoverable, they might not be accessible.
• Your web browser might not redirect automatically to the login page after a firmware upgrade.
  Workaround: Refresh the web browser.
• Radio information on the access point dashboard page might not display properly.
  Workaround: Refresh the web browser.
• Captive portal authentication does not work if the captive portal and the VLAN configuration for an SSID are changed simultaneously.
  Workaround: Make one change (captive portal or VLAN) for the SSID and save, then return to the SSID to make the other change.
• When client isolation is activated for an SSID, clients that are connected to this SSID cannot reach each other even if their IP addresses are part of the allowed list.
• Clients that use the Intel AX210 might encounter disruptions when roaming.
• Video streaming to multiple clients does not work properly if there are more than eight clients in a single multicast group.
• If clients experience connectivity issues on the higher band channels of the 5GHz radio and subsequently switch to the 2.4 GHz radio, they might experience lower throughput.
  Workaround: Configure lower band channels on the 5GHz radio.
• Some newer IoT devices might experience issues connecting to the AP.
  Workaround: Upgrade the IoT devices to the latest driver version and try again. If security is set to WPA3 or WPA2/WPA3 mixed mode, change it to WPA2 mode, and try again.

Download link: https://www.downloads.netgear.com/files/GDC/WAX333/WAX333-V12.8.0.100_hotfix.zip

Firmware Update Instructions:

To update the firmware of your product, follow the instructions mentioned in the product manual. To refer to the user manual, visit https://www.netgear.com/support/, enter your model number in the search box, and click the Documentation button on the product page.