CVE-2026-11737
published 2026-08-11CVE-2026-11737: Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make…
PriorityP423medium4.5CVSS 3.1
AVAACLPRHUINSUCNIHAN
EPSS
0.33%
26.1th percentile
Insufficient input validation vulnerability in the listed
NETGEAR models allows authenticated administrators connected to the
local network to make unauthorized modification to the device software and
functionality.
Affected
26 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| netgear | rax20 | < V1.0.18.144 | V1.0.18.144 |
| netgear | rax20_firmware | < 1.0.18.144 | 1.0.18.144 |
| netgear | rax41 | < V1.1.6.36 | V1.1.6.36 |
| netgear | rax41_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear | rax41v2 | < V1.1.6.36 | V1.1.6.36 |
| netgear | rax41v2_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear | rax42 | < V1.1.6.36 | V1.1.6.36 |
| netgear | rax42_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear | rax42v2 | < V1.1.6.36 | V1.1.6.36 |
| netgear | rax42v2_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear | rax43 | < V1.1.6.36 | V1.1.6.36 |
| netgear | rax43_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear | rax43v2 | < V1.1.6.36 | V1.1.6.36 |
| netgear | rax43v2_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear | rax45 | < V1.0.17.142 | V1.0.17.142 |
| netgear | rax45_firmware | < 1.0.17.142 | 1.0.17.142 |
| netgear | rax49s | < V1.1.6.36 | V1.1.6.36 |
| netgear | rax49s_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear | rax50 | < V1.1.6.36 | V1.1.6.36 |
| netgear | rax50_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear | rax50v2 | < V1.1.6.36 | V1.1.6.36 |
| netgear | rax50v2_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear | rax54s | < V1.1.6.36 | V1.1.6.36 |
| netgear | rax54s_firmware | < 1.1.6.36 | 1.1.6.36 |
| netgear | rax54sv2 | < V1.1.6.36 | V1.1.6.36 |
CVSS provenance
nvdv3.14.5MEDIUMCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
nvdv4.04.3MEDIUMCVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
NETGEAR RAX54Sv2 input validation
vuldb·2026-09-13·CVSS 4.5
CVE-2026-11737 [MEDIUM] NETGEAR RAX54Sv2 input validation
A vulnerability identified as problematic has been detected in NETGEAR RAX20, RAX41, RAX41v2, RAX42, RAX42v2, RAX43, RAX43v2, RAX45, RAX49S, RAX50, RAX50v2, RAX54S and RAX54Sv2. Impacted is an unknown function. Performing a manipulation results in improper input validation.
This vulnerability was named CVE-2026-11737. The attack may be initiated remotely. There is no available exploit.
GHSA
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software a
ghsa_unreviewed·2026-08-11
CVE-2026-11737 [MEDIUM] CWE-20 Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software a
Insufficient input validation vulnerability in the listed
NETGEAR models allows authenticated administrators connected to the
local network to make unauthorized modification to the device software and
functionality.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisoryhttps://www.netgear.com/support/product/rax20/https://www.netgear.com/support/product/rax41/https://www.netgear.com/support/product/rax41v2/https://www.netgear.com/support/product/rax42/https://www.netgear.com/support/product/rax42v2/https://www.netgear.com/support/product/rax43/https://www.netgear.com/support/product/rax43v2/https://www.netgear.com/support/product/rax45/https://www.netgear.com/support/product/rax49s/https://www.netgear.com/support/product/rax50/https://www.netgear.com/support/product/rax50v2/
2026-08-11
Published