CVE-2026-11737 json
Some NETGEAR Nighthawk devices allow administrators to tamper with the device
published 2026-08-11 2 mo ago modified 2026-10-23 16 d ago also EUVD-2026-56189
- cvss
- 4.5
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.3%
- EPSS 0.3% chance of exploitation in 30 days, percentile 26%
- public exploits
- 0
- none known
Summary
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality.
Patch / fix
- NETGEAR RAX20 V1.0.18.144
- NETGEAR RAX41 V1.1.6.36
- NETGEAR RAX41v2 V1.1.6.36
- NETGEAR RAX42 V1.1.6.36
- NETGEAR RAX42v2 V1.1.6.36
- NETGEAR RAX43 V1.1.6.36
- NETGEAR RAX43v2 V1.1.6.36
- NETGEAR RAX45 V1.0.17.142
- NETGEAR RAX49S V1.1.6.36
- NETGEAR RAX50 V1.1.6.36
- NETGEAR RAX50v2 V1.1.6.36
- NETGEAR RAX54S V1.1.6.36
- NETGEAR RAX54Sv2 V1.1.6.36
- netgear.com/support/product/rax20/ patch
- netgear.com/support/product/rax42/ patch
- netgear.com/support/product/rax41v2/ patch
- netgear.com/support/product/rax42v2/ patch
- netgear.com/support/product/rax41/ patch
- netgear.com/support/product/rax43/ patch
- netgear.com/support/product/rax45/ patch
- netgear.com/support/product/rax49s/ patch
- netgear.com/support/product/rax50/ patch
- netgear.com/support/product/rax43v2/ patch
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 2 mo ago
Exploit prediction
0.33% chance of exploitation in the next 30 days, higher than 26% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 4.3 | CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:L/U:Amber |
| CNA | 4.0 | 4.3 | CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber |
| NVD | 3.1 | 4.5 | CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N |
Affected products
- NETGEAR RAX20
- NETGEAR RAX41
- NETGEAR RAX41v2
- NETGEAR RAX42
- NETGEAR RAX42v2
- NETGEAR RAX43
- NETGEAR RAX43v2
- NETGEAR RAX45
- NETGEAR RAX49S
- NETGEAR RAX50
- NETGEAR RAX50v2
- NETGEAR RAX54S
- NETGEAR RAX54Sv2
Classification
- Weakness
-
- CWE-20 Improper Input Validation
References
-
netgear.com
/support/product/rax20/
product, patch
-
netgear.com
/support/product/rax42/
product, patch
-
netgear.com
/support/product/rax41v2/
product, patch
-
netgear.com
/support/product/rax42v2/
product, patch
-
netgear.com
/support/product/rax41/
product, patch
-
netgear.com
/support/product/rax43/
product, patch
-
netgear.com
/support/product/rax45/
product, patch
-
netgear.com
/support/product/rax49s/
product, patch
-
netgear.com
/support/product/rax50/
product, patch
-
netgear.com
/support/product/rax43v2/
product, patch
-
netgear.com
/support/product/rax50v2/
product, patch
-
kb.netgear.com
/000070887/August-2026-NETGEAR-Security-Advisory
vendor-advisory, patch
Sources
- CVE List CVE-2026-11737
- NVD CVE-2026-11737
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.