CVE-2026-11814

Description

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.

References

https://www.netgear.com/support/product/rs90/

https://www.netgear.com/support/product/rs70/

https://www.netgear.com/support/product/rs600/

https://www.netgear.com/support/product/rs500/

https://www.netgear.com/support/product/rs300/

https://www.netgear.com/support/product/rs280/

https://www.netgear.com/support/product/rs200/

https://www.netgear.com/support/product/rs100/

https://www.netgear.com/support/product/rbs760/

https://www.netgear.com/support/product/rbr760/

https://www.netgear.com/support/product/rax70/

https://www.netgear.com/support/product/rax50/

https://www.netgear.com/support/product/rax45/

https://www.netgear.com/support/product/rax43/

https://www.netgear.com/support/product/rax36s/

https://www.netgear.com/support/product/rax30/

https://www.netgear.com/support/product/rax29/

https://www.netgear.com/support/product/rax28/

https://www.netgear.com/support/product/rax20/

https://www.netgear.com/support/product/rax120v2/

https://www.netgear.com/support/product/rax120/

https://www.netgear.com/support/product/rax10/

https://www.netgear.com/support/product/r6700ax/

https://www.netgear.com/support/product/ms60/

https://www.netgear.com/support/product/mr60/

https://www.netgear.com/support/product/be9300/

https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

CVSS v4

EPSS