NetSight
IP …
medium6.4

CVE-2026-11739

A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify loc…

Impact

A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.

Affected products

VendorProductAffected versions
NetgearMs90 Firmware
before 1.0.2.46
NetgearRax20 Firmware
before 1.0.17.142
NetgearRax200 Firmware
before 1.0.11.148
NetgearRax35 Firmware
before 1.0.17.142
NetgearRax35v2 Firmware
before 1.0.17.142
NetgearRax41 Firmware
before 1.1.6.36
NetgearRax41v2 Firmware
before 1.1.6.36
NetgearRax42 Firmware
before 1.1.6.36
NetgearRax42v2 Firmware
before 1.1.6.36
NetgearRax43 Firmware
before 1.1.6.36
NetgearRax43v2 Firmware
before 1.1.6.36
NetgearRax45 Firmware
before 1.0.17.142

Weakness classification

CWE-78

References