CVE-2026-11738

EUVD-2026-56193
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.4 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 16.96%
Affected Products (NVD)
VendorProductVersion
netgearbe9300_firmware
𝑥
< 1.0.1.84
netgearmr60_firmware
𝑥
< 1.1.8.142
netgearms60_firmware
𝑥
< 1.1.8.142
netgearr6700ax_firmware
𝑥
< 1.0.18.164
netgearrax10_firmware
𝑥
< 1.0.5.50
netgearrax120_firmware
𝑥
< 1.2.10.56
netgearrax120v2_firmware
𝑥
< 1.2.10.56
netgearrax20_firmware
𝑥
< 1.0.17.142
netgearrax28_firmware
𝑥
< 1.0.14.108
netgearrax29_firmware
𝑥
< 1.0.14.108
netgearrax30_firmware
𝑥
< 1.0.14.108
netgearrax36s_firmware
𝑥
< 1.0.5.50
netgearrax43_firmware
𝑥
< 1.0.17.142
netgearrax45_firmware
𝑥
< 1.0.17.142
netgearrax50_firmware
𝑥
< 1.0.17.142
netgearrax70_firmware
𝑥
< 1.0.19.172
netgearrbr760_firmware
𝑥
< 6.3.8.11
netgearrbs760_firmware
𝑥
< 6.3.8.11
netgearrs100_firmware
𝑥
< 1.0.1.80
netgearrs200_firmware
𝑥
< 1.0.1.90
netgearrs280_firmware
𝑥
< 1.0.1.90
netgearrs300_firmware
𝑥
< 1.0.1.90
netgearrs500_firmware
𝑥
< 1.0.1.90
netgearrs600_firmware
𝑥
< 1.0.1.90
netgearrs70_firmware
𝑥
< 1.0.1.80
netgearrs90_firmware
𝑥
< 1.0.1.80
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory
https://www.netgear.com/support/product/r7000/
https://www.netgear.com/support/product/raxe500/
https://www.netgear.com/support/product/rs700/