CVE-2026-11737

Published: Aug 11, 2026Modified: Sep 9, 2026

4.3

Vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:AmberShow less

Source: a2826606-91e7-4eb6-899e-8484bd4575d5 (Secondary)

Description

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality.

Affected (13)

Products: Netgear: Rax20 Firmware, Rax41 Firmware, Rax41v2 Firmware, Rax42 Firmware, Rax42v2 Firmware, Rax43 Firmware, Rax43v2 Firmware, Rax45 Firmware, Rax49s Firmware, Rax50 Firmware, Rax50v2 Firmware, Rax54s Firmware, Rax54sv2 Firmware

13 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax20 Firmware	Before 1.0.18.144

Running on/with	Platform Versions
Netgear Rax20	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax41 Firmware	Before 1.1.6.36

Running on/with	Platform Versions
Netgear Rax41	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax41v2 Firmware	Before 1.1.6.36

Running on/with	Platform Versions
Netgear Rax41v2	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax42 Firmware	Before 1.1.6.36

Running on/with	Platform Versions
Netgear Rax42	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax42v2 Firmware	Before 1.1.6.36

Running on/with	Platform Versions
Netgear Rax42v2	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax43 Firmware	Before 1.1.6.36

Running on/with	Platform Versions
Netgear Rax43	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax43v2 Firmware	Before 1.1.6.36

Running on/with	Platform Versions
Netgear Rax43v2	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax45 Firmware	Before 1.0.17.142

Running on/with	Platform Versions
Netgear Rax45	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax49s Firmware	Before 1.1.6.36

Running on/with	Platform Versions
Netgear Rax49s	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax50 Firmware	Before 1.1.6.36

Running on/with	Platform Versions
Netgear Rax50	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax50v2 Firmware	Before 1.1.6.36

Running on/with	Platform Versions
Netgear Rax50v2	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax54s Firmware	Before 1.1.6.36

Running on/with	Platform Versions
Netgear Rax54s	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax54sv2 Firmware	Before 1.1.6.36

Running on/with	Platform Versions
Netgear Rax54sv2	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.