CVE-2026-11737

Published Aug 11, 2026

Last updated 13 days ago

CVSS medium 4.3
Netgear

Overview

Description
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality.
Source
a2826606-91e7-4eb6-899e-8484bd4575d5
NVD status
Received

Risk scores

CVSS 4.0

Type
Secondary
Base score
4.3
Impact score
-
Exploitability score
-
Vector string
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber
Severity
MEDIUM

Weaknesses

a2826606-91e7-4eb6-899e-8484bd4575d5
CWE-20

Social media

Hype score
Not currently trending

Related CVEs

  1. SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability•CVE-2026-15409
  2. A security flaw was discovered in certain NETGEAR Nighthawk RAX series routers that could allow someone already logged in to the device to run unauthorized commands or code on the router.•CVE-2026-62658
  3. A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to stop responding or restart unexpectedly, disrupting network connectivity and making the device temporarily unavailable.•CVE-2026-62655
  4. A security flaw in the router's certificate validation process was discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take control of the device.•CVE-2026-62657
  5. Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability•CVE-2026-56291

References

Sources include official advisories and independent security research.