CVE-2026-11736: Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers

Medium severity · published Aug 11, 2026

CVE-2026-11736

Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers

4.9

CVSS

0.8%

EPSS

On KEV

Description

A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Attack vector

Network

Complexity

Low

Privileges

High

User interaction

None

Confidentiality

None

Integrity

High

Availability

None

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.8% · higher than 55% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

RAX20 · NETGEAR

0 · source: vendor

RAX35v2 · NETGEAR

before V1.0.16.132 · source: vendor

RAX41 · NETGEAR

0 · source: vendor

RAX41v2 · NETGEAR

before V1.1.4.28 · source: vendor

RAX42 · NETGEAR

0 · source: vendor

RAX42v2 · NETGEAR

before V1.1.4.28 · source: vendor

RAX43 · NETGEAR

before V1.0.16.132 · source: vendor

RAX43v2 · NETGEAR

before V1.1.4.28 · source: vendor

RAX45 · NETGEAR

0 · source: vendor

RAX49S · NETGEAR

before V1.1.4.28 · source: vendor

RAX50 · NETGEAR

before V1.0.16.132 · source: vendor

RAX50S · NETGEAR

0 · source: vendor

Affected product

RAX20

NETGEAR

All RAX20 CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-11736

CVE.org

https://www.cve.org/CVERecord?id=CVE-2026-11736

Vendor Advisory

https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory

Product

https://www.netgear.com/support/product/rax20/

Product

https://www.netgear.com/support/product/rax35v2/

Product

https://www.netgear.com/support/product/rax41/

Product

https://www.netgear.com/support/product/rax41v2/

Product

https://www.netgear.com/support/product/rax42/