medium4.4
CVE-2026-11738
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorize…
Impact
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Be9300 Firmware | before 1.0.1.84 |
| Netgear | Mr60 Firmware | before 1.1.8.142 |
| Netgear | Ms60 Firmware | before 1.1.8.142 |
| Netgear | R6700ax Firmware | before 1.0.18.164 |
| Netgear | Rax10 Firmware | before 1.0.5.50 |
| Netgear | Rax120 Firmware | before 1.2.10.56 |
| Netgear | Rax120v2 Firmware | before 1.2.10.56 |
| Netgear | Rax20 Firmware | before 1.0.17.142 |
| Netgear | Rax28 Firmware | before 1.0.14.108 |
| Netgear | Rax29 Firmware | before 1.0.14.108 |
| Netgear | Rax30 Firmware | before 1.0.14.108 |
| Netgear | Rax36s Firmware | before 1.0.5.50 |