CVE-2026-11733
published 2026-08-11CVE-2026-11733: A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.
PriorityP430medium4.9CVSS 3.1
AVNACLPRHUINSUCNIHAN
EPSS
0.51%
42.9th percentile
A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| netgear | rax41 | < V1.1.6.36 | V1.1.6.36 |
| netgear | rax41_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear | rax41v2 | < V1.1.6.36 | V1.1.6.36 |
| netgear | rax41v2_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear | rax42 | < V1.1.6.36 | V1.1.6.36 |
| netgear | rax42_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear | rax42v2 | < V1.1.6.36 | V1.1.6.36 |
| netgear | rax42v2_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear | rax43 | < V1.1.6.36 | V1.1.6.36 |
| netgear | rax43_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear | rax43v2 | < V1.1.6.36 | V1.1.6.36 |
| netgear | rax43v2_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear | rax49s | < V1.1.6.36 | V1.1.6.36 |
| netgear | rax49s_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear | rax50 | < V1.1.6.36 | V1.1.6.36 |
| netgear | rax50_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear | rax50v2 | < V1.1.6.36 | V1.1.6.36 |
| netgear | rax50v2_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear | rax54s | < V1.1.6.36 | V1.1.6.36 |
| netgear | rax54s_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear | rax54sv2 | < V1.1.6.36 | V1.1.6.36 |
| netgear | rax54sv2_firmware | < 1.1.6.36 | 1.1.6.36 |
CVSS provenance
nvdv3.14.9MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
nvdv4.01.1LOWCVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
NETGEAR RAX54Sv2 prior 1.1.6.36 buffer overflow
vuldb·2026-09-13·CVSS 4.9
CVE-2026-11733 [MEDIUM] NETGEAR RAX54Sv2 prior 1.1.6.36 buffer overflow
A vulnerability described as problematic has been identified in NETGEAR RAX41, RAX41v2, RAX42, RAX42v2, RAX43, RAX43v2, RAX49S, RAX50, RAX50v2, RAX54S and RAX54Sv2. This affects an unknown function. The manipulation results in buffer overflow.
This vulnerability is identified as CVE-2026-11733. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is recommended.
GHSA
A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.
ghsa_unreviewed·2026-08-11
CVE-2026-11733 [LOW] CWE-121 A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.
A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisoryhttps://www.netgear.com/support/product/rax41/https://www.netgear.com/support/product/rax41v2/https://www.netgear.com/support/product/rax42/https://www.netgear.com/support/product/rax42v2/https://www.netgear.com/support/product/rax43/https://www.netgear.com/support/product/rax43v2/https://www.netgear.com/support/product/rax49s/https://www.netgear.com/support/product/rax50/https://www.netgear.com/support/product/rax50v2/
2026-08-11
Published