{"id":"CVE-2026-11734","title":"A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.","summary":"A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.","severity":"low","cvss":2.7,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-121"],"vendor":"netgear","product":"mr70_firmware","affected":["mr70_firmware < 1.0.4.48","mr90_firmware < 1.0.2.46","ms70_firmware <= 1.0.4.48","ms90_firmware < 1.0.2.46","rax41_firmware < 1.1.6.36","rax41v2_firmware < 1.1.6.36","rax42_firmware < 1.1.6.36","rax42v2_firmware < 1.1.6.36","rax43_firmware < 1.1.6.36","rax43v2_firmware < 1.1.6.36","rax49s_firmware < 1.1.6.36","rax50_firmware < 1.1.6.36","rax50v2_firmware < 1.1.6.36","rax54s_firmware < 1.1.6.36","rax54sv2_firmware < 1.1.6.36"],"patched":["mr70_firmware 1.0.4.48","mr90_firmware 1.0.2.46","ms90_firmware 1.0.2.46","rax41_firmware 1.1.6.36","rax41v2_firmware 1.1.6.36","rax42_firmware 1.1.6.36","rax42v2_firmware 1.1.6.36","rax43_firmware 1.1.6.36","rax43v2_firmware 1.1.6.36","rax49s_firmware 1.1.6.36","rax50_firmware 1.1.6.36","rax50v2_firmware 1.1.6.36","rax54s_firmware 1.1.6.36","rax54sv2_firmware 1.1.6.36"],"published":"2026-08-11","updated":"2026-09-09","sourceUpdated":"2026-09-09T02:58:58.660","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-11734","references":[{"url":"https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory","label":"a2826606-91e7-4eb6-899e-8484bd4575d5"},{"url":"https://www.netgear.com/support/product/mr70/","label":"a2826606-91e7-4eb6-899e-8484bd4575d5"},{"url":"https://www.netgear.com/support/product/mr90/","label":"a2826606-91e7-4eb6-899e-8484bd4575d5"},{"url":"https://www.netgear.com/support/product/ms70/","label":"a2826606-91e7-4eb6-899e-8484bd4575d5"},{"url":"https://www.netgear.com/support/product/ms90/","label":"a2826606-91e7-4eb6-899e-8484bd4575d5"},{"url":"https://www.netgear.com/support/product/rax41/","label":"a2826606-91e7-4eb6-899e-8484bd4575d5"},{"url":"https://www.netgear.com/support/product/rax41v2/","label":"a2826606-91e7-4eb6-899e-8484bd4575d5"},{"url":"https://www.netgear.com/support/product/rax42/","label":"a2826606-91e7-4eb6-899e-8484bd4575d5"},{"url":"https://www.netgear.com/support/product/rax42v2/","label":"a2826606-91e7-4eb6-899e-8484bd4575d5"},{"url":"https://www.netgear.com/support/product/rax43/","label":"a2826606-91e7-4eb6-899e-8484bd4575d5"},{"url":"https://www.netgear.com/support/product/rax43v2/","label":"a2826606-91e7-4eb6-899e-8484bd4575d5"},{"url":"https://www.netgear.com/support/product/rax49s/","label":"a2826606-91e7-4eb6-899e-8484bd4575d5"},{"url":"https://www.netgear.com/support/product/rax50/","label":"a2826606-91e7-4eb6-899e-8484bd4575d5"},{"url":"https://www.netgear.com/support/product/rax50v2/","label":"a2826606-91e7-4eb6-899e-8484bd4575d5"}],"tags":["nvd"],"epss":0.00603,"epssPercentile":0.47534,"ingestedAt":"2026-08-29T19:41:14.304Z","slug":"CVE-2026-11734","body":"## Overview\n\nA buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.\n\n## Affected\n\n- `mr70_firmware < 1.0.4.48`\n- `mr90_firmware < 1.0.2.46`\n- `ms70_firmware <= 1.0.4.48`\n- `ms90_firmware < 1.0.2.46`\n- `rax41_firmware < 1.1.6.36`\n- `rax41v2_firmware < 1.1.6.36`\n- `rax42_firmware < 1.1.6.36`\n- `rax42v2_firmware < 1.1.6.36`\n- `rax43_firmware < 1.1.6.36`\n- `rax43v2_firmware < 1.1.6.36`\n- `rax49s_firmware < 1.1.6.36`\n- `rax50_firmware < 1.1.6.36`\n- `rax50v2_firmware < 1.1.6.36`\n- `rax54s_firmware < 1.1.6.36`\n- `rax54sv2_firmware < 1.1.6.36`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `mr70_firmware 1.0.4.48`\n- `mr90_firmware 1.0.2.46`\n- `ms90_firmware 1.0.2.46`\n- `rax41_firmware 1.1.6.36`\n- `rax41v2_firmware 1.1.6.36`\n- `rax42_firmware 1.1.6.36`\n- `rax42v2_firmware 1.1.6.36`\n- `rax43_firmware 1.1.6.36`\n- `rax43v2_firmware 1.1.6.36`\n- `rax49s_firmware 1.1.6.36`\n- `rax50_firmware 1.1.6.36`\n- `rax50v2_firmware 1.1.6.36`\n- `rax54s_firmware 1.1.6.36`\n- `rax54sv2_firmware 1.1.6.36`","depth":"sunlit","depthScore":15,"depthScoreParts":{"impact":14.9,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":201443,"id":"CVE-2026-11734","ts":1789399463039,"field":"cvss","old":null,"new":"2.7"},{"seq":201442,"id":"CVE-2026-11734","ts":1789399463039,"field":"severity","old":"none","new":"low"},{"seq":200177,"id":"CVE-2026-11734","ts":1789396927723,"field":"cvss","old":"2.7","new":null},{"seq":200176,"id":"CVE-2026-11734","ts":1789396927723,"field":"severity","old":"low","new":"none"},{"seq":198098,"id":"CVE-2026-11734","ts":1789387964792,"field":"cvss","old":null,"new":"2.7"},{"seq":198097,"id":"CVE-2026-11734","ts":1789387964792,"field":"severity","old":"none","new":"low"},{"seq":195894,"id":"CVE-2026-11734","ts":1789383305715,"field":"cvss","old":"2.7","new":null},{"seq":195893,"id":"CVE-2026-11734","ts":1789383305715,"field":"severity","old":"low","new":"none"},{"seq":194823,"id":"CVE-2026-11734","ts":1789380273005,"field":"cvss","old":null,"new":"2.7"},{"seq":194822,"id":"CVE-2026-11734","ts":1789380273005,"field":"severity","old":"none","new":"low"},{"seq":193610,"id":"CVE-2026-11734","ts":1789378167759,"field":"cvss","old":"2.7","new":null},{"seq":193609,"id":"CVE-2026-11734","ts":1789378167759,"field":"severity","old":"low","new":"none"},{"seq":192397,"id":"CVE-2026-11734","ts":1789376191682,"field":"cvss","old":null,"new":"2.7"},{"seq":192396,"id":"CVE-2026-11734","ts":1789376191682,"field":"severity","old":"none","new":"low"},{"seq":191184,"id":"CVE-2026-11734","ts":1789373039538,"field":"cvss","old":"2.7","new":null},{"seq":191183,"id":"CVE-2026-11734","ts":1789373039538,"field":"severity","old":"low","new":"none"},{"seq":189969,"id":"CVE-2026-11734","ts":1789369094455,"field":"cvss","old":null,"new":"2.7"},{"seq":189968,"id":"CVE-2026-11734","ts":1789369094455,"field":"severity","old":"none","new":"low"},{"seq":188756,"id":"CVE-2026-11734","ts":1789367990199,"field":"cvss","old":"2.7","new":null},{"seq":188755,"id":"CVE-2026-11734","ts":1789367990199,"field":"severity","old":"low","new":"none"},{"seq":187539,"id":"CVE-2026-11734","ts":1789364943863,"field":"cvss","old":null,"new":"2.7"},{"seq":187538,"id":"CVE-2026-11734","ts":1789364943863,"field":"severity","old":"none","new":"low"},{"seq":186326,"id":"CVE-2026-11734","ts":1789362907368,"field":"cvss","old":"2.7","new":null},{"seq":186325,"id":"CVE-2026-11734","ts":1789362907368,"field":"severity","old":"low","new":"none"},{"seq":185112,"id":"CVE-2026-11734","ts":1789360929677,"field":"cvss","old":null,"new":"2.7"},{"seq":185111,"id":"CVE-2026-11734","ts":1789360929677,"field":"severity","old":"none","new":"low"},{"seq":183899,"id":"CVE-2026-11734","ts":1789357851788,"field":"cvss","old":"2.7","new":null},{"seq":183898,"id":"CVE-2026-11734","ts":1789357851788,"field":"severity","old":"low","new":"none"},{"seq":182151,"id":"CVE-2026-11734","ts":1789354055350,"field":"cvss","old":null,"new":"2.7"},{"seq":182150,"id":"CVE-2026-11734","ts":1789354055350,"field":"severity","old":"none","new":"low"},{"seq":180944,"id":"CVE-2026-11734","ts":1789352879291,"field":"cvss","old":"2.7","new":null},{"seq":180943,"id":"CVE-2026-11734","ts":1789352879291,"field":"severity","old":"low","new":"none"},{"seq":179737,"id":"CVE-2026-11734","ts":1789349952270,"field":"cvss","old":null,"new":"2.7"},{"seq":179736,"id":"CVE-2026-11734","ts":1789349952270,"field":"severity","old":"none","new":"low"},{"seq":178530,"id":"CVE-2026-11734","ts":1789347714396,"field":"cvss","old":"2.7","new":null},{"seq":178529,"id":"CVE-2026-11734","ts":1789347714396,"field":"severity","old":"low","new":"none"},{"seq":177323,"id":"CVE-2026-11734","ts":1789346135994,"field":"cvss","old":null,"new":"2.7"},{"seq":177322,"id":"CVE-2026-11734","ts":1789346135994,"field":"severity","old":"none","new":"low"},{"seq":176116,"id":"CVE-2026-11734","ts":1789342649133,"field":"cvss","old":"2.7","new":null},{"seq":176115,"id":"CVE-2026-11734","ts":1789342649133,"field":"severity","old":"low","new":"none"},{"seq":175902,"id":"CVE-2026-11734","ts":1789342262608,"field":"cvss","old":null,"new":"2.7"},{"seq":175901,"id":"CVE-2026-11734","ts":1789342262608,"field":"severity","old":"none","new":"low"},{"seq":175440,"id":"CVE-2026-11734","ts":1789338287105,"field":"cvss","old":"2.7","new":null},{"seq":175439,"id":"CVE-2026-11734","ts":1789338287105,"field":"severity","old":"low","new":"none"},{"seq":174235,"id":"CVE-2026-11734","ts":1789334561927,"field":"cvss","old":null,"new":"2.7"},{"seq":174234,"id":"CVE-2026-11734","ts":1789334561927,"field":"severity","old":"none","new":"low"},{"seq":173030,"id":"CVE-2026-11734","ts":1789333135371,"field":"cvss","old":"2.7","new":null},{"seq":173029,"id":"CVE-2026-11734","ts":1789333135371,"field":"severity","old":"low","new":"none"},{"seq":171844,"id":"CVE-2026-11734","ts":1789330838413,"field":"cvss","old":null,"new":"2.7"},{"seq":171843,"id":"CVE-2026-11734","ts":1789330838413,"field":"severity","old":"none","new":"low"}]}