CVE-2026-11739

Description

A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.

References

https://www.netgear.com/support/product/xr1000v2/

https://www.netgear.com/support/product/xr1000/

https://www.netgear.com/support/product/rs700/

https://www.netgear.com/support/product/raxe500/

https://www.netgear.com/support/product/rax80/

https://www.netgear.com/support/product/rax50v2/

https://www.netgear.com/support/product/rax50/

https://www.netgear.com/support/product/rax49s/

https://www.netgear.com/support/product/rax45/

https://www.netgear.com/support/product/rax43v2/

https://www.netgear.com/support/product/rax43/

https://www.netgear.com/support/product/rax42v2/

https://www.netgear.com/support/product/rax42/

https://www.netgear.com/support/product/rax41v2/

https://www.netgear.com/support/product/rax41/

https://www.netgear.com/support/product/rax35v2/

https://www.netgear.com/support/product/rax35/

https://www.netgear.com/support/product/rax200/

https://www.netgear.com/support/product/rax20/

https://www.netgear.com/support/product/ms90/

https://www.netgear.com/support/product/ms70/

https://www.netgear.com/support/product/ms60/

https://www.netgear.com/support/product/mr90/

https://www.netgear.com/support/product/mr70/

https://www.netgear.com/support/product/mr60/

https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

CVSS v4

EPSS