NetSight
IP …
medium6.8

CVE-2026-11814

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffi…

Impact

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.

Affected products

VendorProductAffected versions
NetgearBe9300 Firmware
before 1.0.1.84
NetgearMr60 Firmware
before 1.1.8.142
NetgearMs60 Firmware
before 1.1.8.142
NetgearR6700ax Firmware
before 1.0.18.164
NetgearRax10 Firmware
before 1.0.5.50
NetgearRax120 Firmware
before 1.2.10.56
NetgearRax120v2 Firmware
before 1.2.10.56
NetgearRax20 Firmware
before 1.0.17.142
NetgearRax28 Firmware
before 1.0.14.108
NetgearRax29 Firmware
before 1.0.14.108
NetgearRax30 Firmware
before 1.0.14.108
NetgearRax36s Firmware
before 1.0.5.50

Weakness classification

CWE-295CWE-77

References