CVE-2026-11736

published 2026-08-11

CVE-2026-11736: A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router…

Priority P4 16 low 1.9 CVSS 4.0

AV A AC H AT N PR H UI N VC N VI H VA N SC N SI N SA N E U CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU N R U V D RE L U Amber

A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality.

Affected

19 ranges

Vendor	Product	Version range	Fixed in
netgear	rax20	< *	*
netgear	rax35v2	< V1.0.16.132	V1.0.16.132
netgear	rax41	< *	*
netgear	rax41v2	< V1.1.4.28	V1.1.4.28
netgear	rax42	< *	*
netgear	rax42v2	< V1.1.4.28	V1.1.4.28
netgear	rax43	< V1.0.16.132	V1.0.16.132
netgear	rax43v2	< V1.1.4.28	V1.1.4.28
netgear	rax45	< *	*
netgear	rax49s	< V1.1.4.28	V1.1.4.28
netgear	rax50	< V1.0.16.132	V1.0.16.132
netgear	rax50s	< *	*
netgear	rax50v2	< V1.1.4.28	V1.1.4.28
netgear	rax54sv2	< V1.1.4.28	V1.1.4.28
netgear	rax54v2	< V1.1.4.28	V1.1.4.28
netgear	raxe450	< *	*
netgear	raxe500	< V1.2.14.114	V1.2.14.114
netgear	xr1000	< V1.1.0.22	V1.1.0.22
netgear	xr1000v2	< V1.1.0.22	V1.1.0.22

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20