CVE-2026-11738

Published Aug 11, 2026

Last updated a month ago

Overview

Description
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
Source
a2826606-91e7-4eb6-899e-8484bd4575d5
NVD status
Analyzed
Products
be9300_firmware, mr60_firmware, ms60_firmware, r6700ax_firmware, rax10_firmware, rax120_firmware, rax120v2_firmware, rax20_firmware, rax28_firmware, rax29_firmware, rax30_firmware, rax36s_firmware, rax43_firmware, rax45_firmware, rax50_firmware, rax70_firmware, rbr760_firmware, rbs760_firmware, rs100_firmware, rs200_firmware, rs280_firmware, rs300_firmware, rs500_firmware, rs600_firmware, rs70_firmware, rs90_firmware

Risk scores

CVSS 4.0

Type
Secondary
Base score
4.3
Impact score
-
Exploitability score
-
Vector string
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber
Severity
MEDIUM

CVSS 3.1

Type
Primary
Base score
4.4
Impact score
3.6
Exploitability score
0.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Severity
MEDIUM

Weaknesses

a2826606-91e7-4eb6-899e-8484bd4575d5
CWE-20

Social media

Hype score
Not currently trending

Configurations