CVE-2026-11735

EUVD-2026-56194
A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.9 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 40.93%
Affected Products (NVD)
VendorProductVersion
netgearr7000_firmware
-
netgearrax20_firmware
-
netgearrax35v2_firmware
𝑥
< 1.0.16.132
netgearrax41_firmware
-
netgearrax41v2_firmware
𝑥
< 1.1.4.28
netgearrax42_firmware
-
netgearrax42v2_firmware
𝑥
< 1.1.4.28
netgearrax43_firmware
𝑥
< 1.0.16.132
netgearrax43v2_firmware
𝑥
< 1.1.4.28
netgearrax45_firmware
-
netgearrax49s_firmware
𝑥
< 1.1.4.28
netgearrax50_firmware
𝑥
< 1.0.16.132
netgearrax50s_firmware
𝑥
< 1.0.16.132
netgearrax50v2_firmware
𝑥
< 1.1.4.28
netgearrax54sv2_firmware
𝑥
< 1.1.4.28
netgearrax54v2_firmware
𝑥
< 1.1.4.28
netgearraxe450_firmware
-
netgearraxe500_firmware
𝑥
< 1.2.14.114
netgearxr1000_firmware
𝑥
< 1.1.0.22
netgearxr1000v2_firmware
𝑥
< 1.1.0.22
𝑥
= Vulnerable software versions