Netgear Router Firmware Flaws (CVE‑2026‑11731, CVE‑2026‑11732) Allow Unauthorized Commands and Settings Changes
What Happened — Netgear disclosed two medium‑severity vulnerabilities affecting a subset of its consumer and small‑business routers.
- CVE‑2026‑11732: An attacker who already has Wi‑Fi credentials and has enabled the “Block Sites” feature can execute arbitrary commands on the router.
- CVE‑2026‑11731: An unauthenticated attacker on the local network can view and modify device details and administrative settings via the router’s management service.
Netgear released firmware updates for all supported models. One affected model (RAX5) has reached end‑of‑service, meaning no further patches will be issued and owners are advised to replace the device. The advisory includes download links for the patched firmware and a 10‑step security checklist for home users. Source: ZDNet Security
Why It Matters for Trust & Control Assurance — The issue highlights the need for a formal vulnerability‑management control that ensures timely patching and retirement of end‑of‑service assets.
Who Is Affected — Consumers, small‑business offices, and any organization that deploys the listed Netgear router models.
Recommended Actions —
- Identify the exact router model and firmware version in your environment.
- Apply the Netgear‑provided firmware updates immediately.
- For end‑of‑service devices (e.g., RAX5), plan a replacement and retire the asset from the network.
- Record the patch status in your asset inventory and map it to your vulnerability‑management control.
Technical Notes —
- Attack Vector: Local network access (requires Wi‑Fi credentials or any device on the LAN).
- CVEs: CVE‑2026‑11731, CVE‑2026‑11732 (both rated medium severity).
- Impact: Potential unauthorized command execution and configuration changes on the router.
Source: Netgear Security Advisory (linked in article)