CVE-2026-11814

Published: Aug 11, 2026Modified: Sep 9, 2026

4.9

Vector

CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber

CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:AmberShow less

Source: a2826606-91e7-4eb6-899e-8484bd4575d5 (Secondary)

Description

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.

Affected (26)

Products: Netgear: Be9300 Firmware, Mr60 Firmware, Ms60 Firmware, R6700ax Firmware, Rax10 Firmware, Rax120 Firmware, Rax120v2 Firmware, Rax20 Firmware, Rax28 Firmware, Rax29 Firmware, Rax30 Firmware, Rax36s Firmware, Rax43 Firmware, Rax45 Firmware, Rax50 Firmware, Rax70 Firmware, Rbr760 Firmware, Rbs760 Firmware, Rs100 Firmware, Rs200 Firmware, Rs280 Firmware, Rs300 Firmware, Rs500 Firmware, Rs600 Firmware, Rs70 Firmware, Rs90 Firmware

26 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Be9300 Firmware	version < 1.0.1.84

Running on/with	Platform Versions
Netgear Be9300	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Mr60 Firmware	version < 1.1.8.142

Running on/with	Platform Versions
Netgear Mr60	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Ms60 Firmware	version < 1.1.8.142

Running on/with	Platform Versions
Netgear Ms60	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R6700ax Firmware	version < 1.0.18.164

Running on/with	Platform Versions
Netgear R6700ax	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax10 Firmware	version < 1.0.5.50

Running on/with	Platform Versions
Netgear Rax10	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax120 Firmware	version < 1.2.10.56

Running on/with	Platform Versions
Netgear Rax120	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax120v2 Firmware	version < 1.2.10.56

Running on/with	Platform Versions
Netgear Rax120v2	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax20 Firmware	version < 1.0.17.142

Running on/with	Platform Versions
Netgear Rax20	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax28 Firmware	version < 1.0.14.108

Running on/with	Platform Versions
Netgear Rax28	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax29 Firmware	version < 1.0.14.108

Running on/with	Platform Versions
Netgear Rax29	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax30 Firmware	version < 1.0.14.108

Running on/with	Platform Versions
Netgear Rax30	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax36s Firmware	version < 1.0.5.50

Running on/with	Platform Versions
Netgear Rax36s	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax43 Firmware	version < 1.0.17.142

Running on/with	Platform Versions
Netgear Rax43	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax45 Firmware	version < 1.0.17.142

Running on/with	Platform Versions
Netgear Rax45	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax50 Firmware	version < 1.0.17.142

Running on/with	Platform Versions
Netgear Rax50	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rax70 Firmware	version < 1.0.19.172

Running on/with	Platform Versions
Netgear Rax70	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbr760 Firmware	version < 6.3.8.11

Running on/with	Platform Versions
Netgear Rbr760	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbs760 Firmware	version < 6.3.8.11

Running on/with	Platform Versions
Netgear Rbs760	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rs100 Firmware	version < 1.0.1.80

Running on/with	Platform Versions
Netgear Rs100	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rs200 Firmware	version < 1.0.1.90

Running on/with	Platform Versions
Netgear Rs200	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rs280 Firmware	version < 1.0.1.90

Running on/with	Platform Versions
Netgear Rs280	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rs300 Firmware	version < 1.0.1.90

Running on/with	Platform Versions
Netgear Rs300	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rs500 Firmware	version < 1.0.1.90

Running on/with	Platform Versions
Netgear Rs500	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rs600 Firmware	version < 1.0.1.90

Running on/with	Platform Versions
Netgear Rs600	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rs70 Firmware	version < 1.0.1.80

Running on/with	Platform Versions
Netgear Rs70	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rs90 Firmware	version < 1.0.1.80

Running on/with	Platform Versions
Netgear Rs90	All versions

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.