cbcvebase.
CVE-2026-11739
published 2026-08-11

CVE-2026-11739: A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify…

PriorityP348medium6.4CVSS 3.1
AVAACHPRLUINSUCHIHAN
EPSS
2.55%
84.9th percentile
A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.

Affected

54 ranges· showing 25
VendorProductVersion rangeFixed in
netgearmr60< V1.1.8.142V1.1.8.142
netgearmr60_firmware< 1.1.8.1421.1.8.142
netgearmr70< V1.0.4.48V1.0.4.48
netgearmr70_firmware< 1.0.4.481.0.4.48
netgearmr90< V1.0.2.46V1.0.2.46
netgearmr90_firmware< 1.0.2.461.0.2.46
netgearms60< V1.1.8.142V1.1.8.142
netgearms60_firmware< 1.1.8.1421.1.8.142
netgearms70< V1.0.4.48V1.0.4.48
netgearms70_firmware< 1.0.4.481.0.4.48
netgearms90< V1.0.2.46V1.0.2.46
netgearms90_firmware< 1.0.2.461.0.2.46
netgearrax20< V1.0.17.142V1.0.17.142
netgearrax200< V1.0.11.148V1.0.11.148
netgearrax200_firmware< 1.0.11.1481.0.11.148
netgearrax20_firmware< 1.0.17.1421.0.17.142
netgearrax35< V1.0.17.142V1.0.17.142
netgearrax35_firmware< 1.0.17.1421.0.17.142
netgearrax35v2< V1.0.17.142V1.0.17.142
netgearrax35v2_firmware< 1.0.17.1421.0.17.142
netgearrax41< V1.1.6.36V1.1.6.36
netgearrax41_firmware< 1.1.6.361.1.6.36
netgearrax41v2< V1.1.6.36V1.1.6.36
netgearrax41v2_firmware< 1.1.6.361.1.6.36
netgearrax42< V1.1.6.36V1.1.6.36

CVSS provenance

nvdv3.16.4MEDIUMCVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
nvdv4.04.9MEDIUMCVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.