CVE-2026-11735: A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the…

PriorityP432medium4.9CVSS 3.1

AVNACLPRHUINSUCNIHAN

EPSS

0.77%

55.3th percentile

A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.

Affected

34 ranges· showing 25

Vendor	Product	Version range	Fixed in
netgear	r7000	< *	*
netgear	rax20	< *	*
netgear	rax35v2	< V1.0.16.132	V1.0.16.132
netgear	rax35v2_firmware	< 1.0.16.132	1.0.16.132
netgear	rax41	< *	*
netgear	rax41v2	< V1.1.4.28	V1.1.4.28
netgear	rax41v2_firmware	< 1.1.4.28	1.1.4.28
netgear	rax42	< *	*
netgear	rax42v2	< V1.1.4.28	V1.1.4.28
netgear	rax42v2_firmware	< 1.1.4.28	1.1.4.28
netgear	rax43	< V1.0.16.132	V1.0.16.132
netgear	rax43_firmware	< 1.0.16.132	1.0.16.132
netgear	rax43v2	< V1.1.4.28	V1.1.4.28
netgear	rax43v2_firmware	< 1.1.4.28	1.1.4.28
netgear	rax45	< *	*
netgear	rax49s	< V1.1.4.28	V1.1.4.28
netgear	rax49s_firmware	< 1.1.4.28	1.1.4.28
netgear	rax50	< V1.0.16.132	V1.0.16.132
netgear	rax50_firmware	< 1.0.16.132	1.0.16.132
netgear	rax50s	< V1.0.16.132	V1.0.16.132
netgear	rax50s_firmware	< 1.0.16.132	1.0.16.132
netgear	rax50v2	< V1.1.4.28	V1.1.4.28
netgear	rax50v2_firmware	< 1.1.4.28	1.1.4.28
netgear	rax54sv2	< V1.1.4.28	V1.1.4.28
netgear	rax54sv2_firmware	< 1.1.4.28	1.1.4.28

CVSS provenance

nvdv3.14.9MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

nvdv4.01.9LOWCVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:D/RE:L/U:Amber

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.