---
id: CVE-2026-11738
title: "Insufficient input validation vulnerability in the\_listed NETGEAR models allows\_authenticated administrators connected to the local network to make unauthorized modification to router software and functionality."
summary: "Insufficient input validation vulnerability in the\_listed NETGEAR models allows\_authenticated administrators connected to the local network to make unauthorized modification to router software and functionality."
severity: medium
cvss: 4.4
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N'
cwe:
  - CWE-20
vendor: netgear
product: be9300_firmware
affected:
  - be9300_firmware < 1.0.1.84
  - mr60_firmware < 1.1.8.142
  - ms60_firmware < 1.1.8.142
  - r6700ax_firmware < 1.0.18.164
  - rax10_firmware < 1.0.5.50
  - rax120_firmware < 1.2.10.56
  - rax120v2_firmware < 1.2.10.56
  - rax20_firmware < 1.0.17.142
  - rax28_firmware < 1.0.14.108
  - rax29_firmware < 1.0.14.108
  - rax30_firmware < 1.0.14.108
  - rax36s_firmware < 1.0.5.50
  - rax43_firmware < 1.0.17.142
  - rax45_firmware < 1.0.17.142
  - rax50_firmware < 1.0.17.142
  - rax70_firmware < 1.0.19.172
  - rbr760_firmware < 6.3.8.11
  - rbs760_firmware < 6.3.8.11
  - rs100_firmware < 1.0.1.80
  - rs200_firmware < 1.0.1.90
  - rs280_firmware < 1.0.1.90
  - rs300_firmware < 1.0.1.90
  - rs500_firmware < 1.0.1.90
  - rs600_firmware < 1.0.1.90
  - rs70_firmware < 1.0.1.80
  - rs90_firmware < 1.0.1.80
patched:
  - be9300_firmware 1.0.1.84
  - mr60_firmware 1.1.8.142
  - ms60_firmware 1.1.8.142
  - r6700ax_firmware 1.0.18.164
  - rax10_firmware 1.0.5.50
  - rax120_firmware 1.2.10.56
  - rax120v2_firmware 1.2.10.56
  - rax20_firmware 1.0.17.142
  - rax28_firmware 1.0.14.108
  - rax29_firmware 1.0.14.108
  - rax30_firmware 1.0.14.108
  - rax36s_firmware 1.0.5.50
  - rax43_firmware 1.0.17.142
  - rax45_firmware 1.0.17.142
  - rax50_firmware 1.0.17.142
  - rax70_firmware 1.0.19.172
  - rbr760_firmware 6.3.8.11
  - rbs760_firmware 6.3.8.11
  - rs100_firmware 1.0.1.80
  - rs200_firmware 1.0.1.90
  - rs280_firmware 1.0.1.90
  - rs300_firmware 1.0.1.90
  - rs500_firmware 1.0.1.90
  - rs600_firmware 1.0.1.90
  - rs70_firmware 1.0.1.80
  - rs90_firmware 1.0.1.80
published: '2026-08-11'
updated: '2026-09-09'
sourceUpdated: '2026-09-09T02:59:45.560'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-11738'
references:
  - url: 'https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory'
    label: a2826606-91e7-4eb6-899e-8484bd4575d5
  - url: 'https://www.netgear.com/support/product/r7000/'
    label: a2826606-91e7-4eb6-899e-8484bd4575d5
  - url: 'https://www.netgear.com/support/product/raxe500/'
    label: a2826606-91e7-4eb6-899e-8484bd4575d5
  - url: 'https://www.netgear.com/support/product/rs700/'
    label: a2826606-91e7-4eb6-899e-8484bd4575d5
tags:
  - nvd
epss: 0.00269
epssPercentile: 0.16959
ingestedAt: '2026-08-29T19:41:14.478Z'
---

## Overview

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.

## Affected

- `be9300_firmware < 1.0.1.84`
- `mr60_firmware < 1.1.8.142`
- `ms60_firmware < 1.1.8.142`
- `r6700ax_firmware < 1.0.18.164`
- `rax10_firmware < 1.0.5.50`
- `rax120_firmware < 1.2.10.56`
- `rax120v2_firmware < 1.2.10.56`
- `rax20_firmware < 1.0.17.142`
- `rax28_firmware < 1.0.14.108`
- `rax29_firmware < 1.0.14.108`
- `rax30_firmware < 1.0.14.108`
- `rax36s_firmware < 1.0.5.50`
- `rax43_firmware < 1.0.17.142`
- `rax45_firmware < 1.0.17.142`
- `rax50_firmware < 1.0.17.142`
- `rax70_firmware < 1.0.19.172`
- `rbr760_firmware < 6.3.8.11`
- `rbs760_firmware < 6.3.8.11`
- `rs100_firmware < 1.0.1.80`
- `rs200_firmware < 1.0.1.90`
- `rs280_firmware < 1.0.1.90`
- `rs300_firmware < 1.0.1.90`
- `rs500_firmware < 1.0.1.90`
- `rs600_firmware < 1.0.1.90`
- `rs70_firmware < 1.0.1.80`
- `rs90_firmware < 1.0.1.80`

## Remediation

Upgrade past the affected range:

- `be9300_firmware 1.0.1.84`
- `mr60_firmware 1.1.8.142`
- `ms60_firmware 1.1.8.142`
- `r6700ax_firmware 1.0.18.164`
- `rax10_firmware 1.0.5.50`
- `rax120_firmware 1.2.10.56`
- `rax120v2_firmware 1.2.10.56`
- `rax20_firmware 1.0.17.142`
- `rax28_firmware 1.0.14.108`
- `rax29_firmware 1.0.14.108`
- `rax30_firmware 1.0.14.108`
- `rax36s_firmware 1.0.5.50`
- `rax43_firmware 1.0.17.142`
- `rax45_firmware 1.0.17.142`
- `rax50_firmware 1.0.17.142`
- `rax70_firmware 1.0.19.172`
- `rbr760_firmware 6.3.8.11`
- `rbs760_firmware 6.3.8.11`
- `rs100_firmware 1.0.1.80`
- `rs200_firmware 1.0.1.90`
- `rs280_firmware 1.0.1.90`
- `rs300_firmware 1.0.1.90`
- `rs500_firmware 1.0.1.90`
- `rs600_firmware 1.0.1.90`
- `rs70_firmware 1.0.1.80`
- `rs90_firmware 1.0.1.80`