CVE-2026-11734

Published: Aug 11, 2026Modified: Sep 9, 2026

1.1

Vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:D/RE:L/U:Amber

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:D/RE:L/U:AmberShow less

Source: a2826606-91e7-4eb6-899e-8484bd4575d5 (Secondary)

Description

A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.

Affected (15)

Products: Netgear: Mr70 Firmware, Mr90 Firmware, Ms70 Firmware, Ms90 Firmware, Rax41 Firmware, Rax41v2 Firmware, Rax42 Firmware, Rax42v2 Firmware, Rax43 Firmware, Rax43v2 Firmware, Rax49s Firmware, Rax50 Firmware, Rax50v2 Firmware, Rax54s Firmware, Rax54sv2 Firmware

15 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Mr70 Firmware	Before 1.0.4.48

Running on/with	Platform Versions
Netgear Mr70	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Mr90 Firmware	Before 1.0.2.46

Running on/with	Platform Versions
Netgear Mr90	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Ms70 Firmware	Up to 1.0.4.48

Running on/with	Platform Versions
Netgear Ms70	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Ms90 Firmware	Before 1.0.2.46

Running on/with	Platform Versions
Netgear Ms90	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax41 Firmware	Before 1.1.6.36

Running on/with	Platform Versions
Netgear Rax41	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax41v2 Firmware	Before 1.1.6.36

Running on/with	Platform Versions
Netgear Rax41v2	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax42 Firmware	Before 1.1.6.36

Running on/with	Platform Versions
Netgear Rax42	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax42v2 Firmware	Before 1.1.6.36

Running on/with	Platform Versions
Netgear Rax42v2	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax43 Firmware	Before 1.1.6.36

Running on/with	Platform Versions
Netgear Rax43	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax43v2 Firmware	Before 1.1.6.36

Running on/with	Platform Versions
Netgear Rax43v2	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax49s Firmware	Before 1.1.6.36

Running on/with	Platform Versions
Netgear Rax49s	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax50 Firmware	Before 1.1.6.36

Running on/with	Platform Versions
Netgear Rax50	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax50v2 Firmware	Before 1.1.6.36

Running on/with	Platform Versions
Netgear Rax50v2	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax54s Firmware	Before 1.1.6.36

Running on/with	Platform Versions
Netgear Rax54s	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax54sv2 Firmware	Before 1.1.6.36

Running on/with	Platform Versions
Netgear Rax54sv2	All versions

Related CWEs

CWE-121

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).