CVE-2026-11738

Published: Aug 11, 2026Modified: Sep 9, 2026

4.3

Vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:AmberShow less

Source: a2826606-91e7-4eb6-899e-8484bd4575d5 (Secondary)

Description

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.

Affected (26)

Products: Netgear: Be9300 Firmware, Mr60 Firmware, Ms60 Firmware, R6700ax Firmware, Rax10 Firmware, Rax120 Firmware, Rax120v2 Firmware, Rax20 Firmware, Rax28 Firmware, Rax29 Firmware, Rax30 Firmware, Rax36s Firmware, Rax43 Firmware, Rax45 Firmware, Rax50 Firmware, Rax70 Firmware, Rbr760 Firmware, Rbs760 Firmware, Rs100 Firmware, Rs200 Firmware, Rs280 Firmware, Rs300 Firmware, Rs500 Firmware, Rs600 Firmware, Rs70 Firmware, Rs90 Firmware

26 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Be9300 Firmware	Before 1.0.1.84

Running on/with	Platform Versions
Netgear Be9300	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Mr60 Firmware	Before 1.1.8.142

Running on/with	Platform Versions
Netgear Mr60	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Ms60 Firmware	Before 1.1.8.142

Running on/with	Platform Versions
Netgear Ms60	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R6700ax Firmware	Before 1.0.18.164

Running on/with	Platform Versions
Netgear R6700ax	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax10 Firmware	Before 1.0.5.50

Running on/with	Platform Versions
Netgear Rax10	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax120 Firmware	Before 1.2.10.56

Running on/with	Platform Versions
Netgear Rax120	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax120v2 Firmware	Before 1.2.10.56

Running on/with	Platform Versions
Netgear Rax120v2	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax20 Firmware	Before 1.0.17.142

Running on/with	Platform Versions
Netgear Rax20	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax28 Firmware	Before 1.0.14.108

Running on/with	Platform Versions
Netgear Rax28	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax29 Firmware	Before 1.0.14.108

Running on/with	Platform Versions
Netgear Rax29	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax30 Firmware	Before 1.0.14.108

Running on/with	Platform Versions
Netgear Rax30	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax36s Firmware	Before 1.0.5.50

Running on/with	Platform Versions
Netgear Rax36s	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax43 Firmware	Before 1.0.17.142

Running on/with	Platform Versions
Netgear Rax43	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax45 Firmware	Before 1.0.17.142

Running on/with	Platform Versions
Netgear Rax45	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax50 Firmware	Before 1.0.17.142

Running on/with	Platform Versions
Netgear Rax50	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax70 Firmware	Before 1.0.19.172

Running on/with	Platform Versions
Netgear Rax70	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbr760 Firmware	Before 6.3.8.11

Running on/with	Platform Versions
Netgear Rbr760	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbs760 Firmware	Before 6.3.8.11

Running on/with	Platform Versions
Netgear Rbs760	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rs100 Firmware	Before 1.0.1.80

Running on/with	Platform Versions
Netgear Rs100	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rs200 Firmware	Before 1.0.1.90

Running on/with	Platform Versions
Netgear Rs200	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rs280 Firmware	Before 1.0.1.90

Running on/with	Platform Versions
Netgear Rs280	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rs300 Firmware	Before 1.0.1.90

Running on/with	Platform Versions
Netgear Rs300	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rs500 Firmware	Before 1.0.1.90

Running on/with	Platform Versions
Netgear Rs500	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rs600 Firmware	Before 1.0.1.90

Running on/with	Platform Versions
Netgear Rs600	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rs70 Firmware	Before 1.0.1.80

Running on/with	Platform Versions
Netgear Rs70	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rs90 Firmware	Before 1.0.1.80

Running on/with	Platform Versions
Netgear Rs90	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory

Source: a2826606-91e7-4eb6-899e-8484bd4575d5

Vendor Advisory

https://www.netgear.com/support/product/r7000/

Source: a2826606-91e7-4eb6-899e-8484bd4575d5

Product

https://www.netgear.com/support/product/raxe500/

Source: a2826606-91e7-4eb6-899e-8484bd4575d5

Product

https://www.netgear.com/support/product/rs700/

Source: a2826606-91e7-4eb6-899e-8484bd4575d5

Product

Timeline

No history available yet.