Login Request a demo
Medium severity · published Aug 11, 2026
CVE-2026-11737
Some NETGEAR Nighthawk devices allow administrators to tamper with the device
4.5
CVSS
0.3%
EPSS
No
On KEV
Description
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Attack vector
Adjacent
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 26% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
RAX20 · NETGEAR
before V1.0.18.144 · source: vendor
RA
RAX41 · NETGEAR
before V1.1.6.36 · source: vendor
RA
RAX41v2 · NETGEAR
before V1.1.6.36 · source: vendor
RA
RAX42 · NETGEAR
before V1.1.6.36 · source: vendor
RA
RAX42v2 · NETGEAR
before V1.1.6.36 · source: vendor
RA
RAX43 · NETGEAR
before V1.1.6.36 · source: vendor
RA
RAX43v2 · NETGEAR
before V1.1.6.36 · source: vendor
RA
RAX45 · NETGEAR
before V1.0.17.142 · source: vendor
RA
RAX49S · NETGEAR
before V1.1.6.36 · source: vendor
RA
RAX50 · NETGEAR
before V1.1.6.36 · source: vendor
RA
RAX50v2 · NETGEAR
before V1.1.6.36 · source: vendor
RA
RAX54S · NETGEAR
before V1.1.6.36 · source: vendor
Affected product
RA
RAX20
NETGEAR
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-11737
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-11737
Vendor Advisory
https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory
Product
https://www.netgear.com/support/product/rax20/
Product
https://www.netgear.com/support/product/rax41/
Product
https://www.netgear.com/support/product/rax41v2/
Product
https://www.netgear.com/support/product/rax42/
Product
https://www.netgear.com/support/product/rax42v2/
More from RAX20
6.8
CVE-2026-11814
Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers
6.4
CVE-2026-11739
Command injection vulnerability in some NETGEAR Nighthawk devices
4.9
CVE-2026-11736
Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers
4.9
CVE-2026-11735
Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models
4.5
CVE-2026-0418
Certain NETGEAR devices allow administrators to tamper with system