CVE-2026-11737

published 2026-08-11

CVE-2026-11737: Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make…

Priority P4 22 medium 4.3 CVSS 4.0

AV A AC L AT N PR H UI N VC N VI H VA N SC N SI N SA N E U CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU N R U V D RE L U Amber

Insufficient input validation vulnerability in the listed
NETGEAR models allows authenticated administrators connected to the
local network to make unauthorized modification to the device software and
functionality.

Affected

13 ranges

Vendor	Product	Version range	Fixed in
netgear	rax20	< V1.0.18.144	V1.0.18.144
netgear	rax41	< V1.1.6.36	V1.1.6.36
netgear	rax41v2	< V1.1.6.36	V1.1.6.36
netgear	rax42	< V1.1.6.36	V1.1.6.36
netgear	rax42v2	< V1.1.6.36	V1.1.6.36
netgear	rax43	< V1.1.6.36	V1.1.6.36
netgear	rax43v2	< V1.1.6.36	V1.1.6.36
netgear	rax45	< V1.0.17.142	V1.0.17.142
netgear	rax49s	< V1.1.6.36	V1.1.6.36
netgear	rax50	< V1.1.6.36	V1.1.6.36
netgear	rax50v2	< V1.1.6.36	V1.1.6.36
netgear	rax54s	< V1.1.6.36	V1.1.6.36
netgear	rax54sv2	< V1.1.6.36	V1.1.6.36

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20