High severity · published Oct 13, 2026
CVE-2026-11731
Authentication Bypass Vulnerability in Certain NETGEAR RAX Series Models
8.8
CVSS
0.3%
EPSS
No
On KEV
Description
An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the confidentiality and integrity of management data and the availability of device-management functions.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 19% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
RAX28 · NETGEAR
before v1.0.15.110 · source: vendor
RA
RAX29 · NETGEAR
before v1.0.15.110 · source: vendor
RA
RAX30 · NETGEAR
before v1.0.15.110 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-11731
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-11731
product
https://www.netgear.com/support/product/rax30
vendor-advisory
https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory
More from RAX28
6.8
CVE-2026-11814
Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers
