CVE-2026-11814Medium· 6.8▾ SunlitA command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 37.4 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 29.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.8%
Last analysed / modified upstream
0.8% → 0.9%
6.8 → —
medium → none
— → 6.8
none → medium
6.8 → —
medium → none
— → 6.8
none → medium
6.8 → —
medium → none
— → 6.8
none → medium
A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.
be9300_firmware < 1.0.1.84mr60_firmware < 1.1.8.142ms60_firmware < 1.1.8.142r6700ax_firmware < 1.0.18.164rax10_firmware < 1.0.5.50rax120_firmware < 1.2.10.56rax120v2_firmware < 1.2.10.56rax20_firmware < 1.0.17.142rax28_firmware < 1.0.14.108rax29_firmware < 1.0.14.108rax30_firmware < 1.0.14.108rax36s_firmware < 1.0.5.50rax43_firmware < 1.0.17.142rax45_firmware < 1.0.17.142rax50_firmware < 1.0.17.142rax70_firmware < 1.0.19.172rbr760_firmware < 6.3.8.11rbs760_firmware < 6.3.8.11rs100_firmware < 1.0.1.80rs200_firmware < 1.0.1.90rs280_firmware < 1.0.1.90rs300_firmware < 1.0.1.90rs500_firmware < 1.0.1.90rs600_firmware < 1.0.1.90rs70_firmware < 1.0.1.80rs90_firmware < 1.0.1.80Upgrade past the affected range:
be9300_firmware 1.0.1.84mr60_firmware 1.1.8.142ms60_firmware 1.1.8.142r6700ax_firmware 1.0.18.164rax10_firmware 1.0.5.50rax120_firmware 1.2.10.56rax120v2_firmware 1.2.10.56rax20_firmware 1.0.17.142rax28_firmware 1.0.14.108rax29_firmware 1.0.14.108rax30_firmware 1.0.14.108rax36s_firmware 1.0.5.50rax43_firmware 1.0.17.142rax45_firmware 1.0.17.142rax50_firmware 1.0.17.142rax70_firmware 1.0.19.172rbr760_firmware 6.3.8.11rbs760_firmware 6.3.8.11rs100_firmware 1.0.1.80rs200_firmware 1.0.1.90rs280_firmware 1.0.1.90rs300_firmware 1.0.1.90rs500_firmware 1.0.1.90rs600_firmware 1.0.1.90rs70_firmware 1.0.1.80rs90_firmware 1.0.1.80Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-11739Medium· 6.4A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiali…
CVE-2026-11737Medium· 4.5Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality.
CVE-2026-11736Medium· 4.9A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality.
CVE-2026-11735Medium· 4.9A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.
CVE-2026-11734Low· 2.7A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.
CVE-2026-11733Medium· 4.9A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.