CVE-2026-11738

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.

Score

CVSS 3.1 4.4 Medium

Status

Analyzed - a2826606-91e7-4eb6-899e-8484bd4575d5

Published

2026-08-11

Last modified

2026-10-23

Weaknesses

CWE-20

Affected products

• Be9300 Firmware (Netgear)
• Mr60 Firmware (Netgear)
• Ms60 Firmware (Netgear)
• R6700ax Firmware (Netgear)
• R7000 (Netgear)
• Rax10 Firmware (Netgear)
• Rax120 Firmware (Netgear)
• Rax120v2 Firmware (Netgear)
• Rax20 Firmware (Netgear)
• Rax28 Firmware (Netgear)
• Rax29 Firmware (Netgear)
• Rax30 Firmware (Netgear)
• Rax36s Firmware (Netgear)
• Rax43 Firmware (Netgear)
• Rax45 Firmware (Netgear)
• Rax50 Firmware (Netgear)
• Rax70 Firmware (Netgear)
• Raxe500 (Netgear)
• Rbr760 Firmware (Netgear)
• Rbs760 Firmware (Netgear)
• Rs100 Firmware (Netgear)
• Rs200 Firmware (Netgear)
• Rs280 Firmware (Netgear)
• Rs300 Firmware (Netgear)
• Rs500 Firmware (Netgear)
• Rs600 Firmware (Netgear)
• Rs700 (Netgear)
• Rs70 Firmware (Netgear)
• Rs90 Firmware (Netgear)

References

• https://www.netgear.com/support/product/r7000/
• https://www.netgear.com/support/product/rs700/
• https://www.netgear.com/support/product/raxe500/
• https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory