4.4

CVE-2026-11738

Insufficient input validation in certain NETGEAR Nighthawk routers allows administrators to tamper with the device.

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netgear ≫ Be9300 Firmware Version < 1.0.1.84
   Netgear ≫ Be9300 Version -
Netgear ≫ Mr60 Firmware Version < 1.1.8.142
   Netgear ≫ Mr60 Version -
Netgear ≫ Ms60 Firmware Version < 1.1.8.142
   Netgear ≫ Ms60 Version -
Netgear ≫ R6700ax Firmware Version < 1.0.18.164
   Netgear ≫ R6700ax Version -
Netgear ≫ Rax10 Firmware Version < 1.0.5.50
   Netgear ≫ Rax10 Version -
Netgear ≫ Rax120 Firmware Version < 1.2.10.56
   Netgear ≫ Rax120 Version -
Netgear ≫ Rax120v2 Firmware Version < 1.2.10.56
   Netgear ≫ Rax120v2 Version -
Netgear ≫ Rax20 Firmware Version < 1.0.17.142
   Netgear ≫ Rax20 Version -
Netgear ≫ Rax28 Firmware Version < 1.0.14.108
   Netgear ≫ Rax28 Version -
Netgear ≫ Rax29 Firmware Version < 1.0.14.108
   Netgear ≫ Rax29 Version -
Netgear ≫ Rax30 Firmware Version < 1.0.14.108
   Netgear ≫ Rax30 Version -
Netgear ≫ Rax36s Firmware Version < 1.0.5.50
   Netgear ≫ Rax36s Version -
Netgear ≫ Rax43 Firmware Version < 1.0.17.142
   Netgear ≫ Rax43 Version -
Netgear ≫ Rax45 Firmware Version < 1.0.17.142
   Netgear ≫ Rax45 Version -
Netgear ≫ Rax50 Firmware Version < 1.0.17.142
   Netgear ≫ Rax50 Version -
Netgear ≫ Rax70 Firmware Version < 1.0.19.172
   Netgear ≫ Rax70 Version -
Netgear ≫ Rbr760 Firmware Version < 6.3.8.11
   Netgear ≫ Rbr760 Version -
Netgear ≫ Rbs760 Firmware Version < 6.3.8.11
   Netgear ≫ Rbs760 Version -
Netgear ≫ Rs100 Firmware Version < 1.0.1.80
   Netgear ≫ Rs100 Version -
Netgear ≫ Rs200 Firmware Version < 1.0.1.90
   Netgear ≫ Rs200 Version -
Netgear ≫ Rs280 Firmware Version < 1.0.1.90
   Netgear ≫ Rs280 Version -
Netgear ≫ Rs300 Firmware Version < 1.0.1.90
   Netgear ≫ Rs300 Version -
Netgear ≫ Rs500 Firmware Version < 1.0.1.90
   Netgear ≫ Rs500 Version -
Netgear ≫ Rs600 Firmware Version < 1.0.1.90
   Netgear ≫ Rs600 Version -
Netgear ≫ Rs70 Firmware Version < 1.0.1.80
   Netgear ≫ Rs70 Version -
Netgear ≫ Rs90 Firmware Version < 1.0.1.80
   Netgear ≫ Rs90 Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.097
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.4 0.8 3.6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
NETGEAR 4.3 0 0
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://www.netgear.com/support/product/r7000/
Product
https://www.netgear.com/support/product/raxe500/
Product
https://www.netgear.com/support/product/rs700/
Product
https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory
Vendor Advisory