CVE-2026-11738Medium· 4.4▾ SunlitInsufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 24.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 29.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.2%
Last analysed / modified upstream
0.2% → 0.3%
4.4 → —
medium → none
— → 4.4
none → medium
4.4 → —
medium → none
— → 4.4
none → medium
4.4 → —
medium → none
— → 4.4
none → medium
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
be9300_firmware < 1.0.1.84mr60_firmware < 1.1.8.142ms60_firmware < 1.1.8.142r6700ax_firmware < 1.0.18.164rax10_firmware < 1.0.5.50rax120_firmware < 1.2.10.56rax120v2_firmware < 1.2.10.56rax20_firmware < 1.0.17.142rax28_firmware < 1.0.14.108rax29_firmware < 1.0.14.108rax30_firmware < 1.0.14.108rax36s_firmware < 1.0.5.50rax43_firmware < 1.0.17.142rax45_firmware < 1.0.17.142rax50_firmware < 1.0.17.142rax70_firmware < 1.0.19.172rbr760_firmware < 6.3.8.11rbs760_firmware < 6.3.8.11rs100_firmware < 1.0.1.80rs200_firmware < 1.0.1.90rs280_firmware < 1.0.1.90rs300_firmware < 1.0.1.90rs500_firmware < 1.0.1.90rs600_firmware < 1.0.1.90rs70_firmware < 1.0.1.80rs90_firmware < 1.0.1.80Upgrade past the affected range:
be9300_firmware 1.0.1.84mr60_firmware 1.1.8.142ms60_firmware 1.1.8.142r6700ax_firmware 1.0.18.164rax10_firmware 1.0.5.50rax120_firmware 1.2.10.56rax120v2_firmware 1.2.10.56rax20_firmware 1.0.17.142rax28_firmware 1.0.14.108rax29_firmware 1.0.14.108rax30_firmware 1.0.14.108rax36s_firmware 1.0.5.50rax43_firmware 1.0.17.142rax45_firmware 1.0.17.142rax50_firmware 1.0.17.142rax70_firmware 1.0.19.172rbr760_firmware 6.3.8.11rbs760_firmware 6.3.8.11rs100_firmware 1.0.1.80rs200_firmware 1.0.1.90rs280_firmware 1.0.1.90rs300_firmware 1.0.1.90rs500_firmware 1.0.1.90rs600_firmware 1.0.1.90rs70_firmware 1.0.1.80rs90_firmware 1.0.1.80Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-11739Medium· 6.4A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiali…
CVE-2026-11736Medium· 4.9A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality.
CVE-2026-11735Medium· 4.9A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.
CVE-2026-9214Medium· 4.5Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
CVE-2026-11814Medium· 6.8A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of …
CVE-2026-11737Medium· 4.5Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality.