Netgear Mr90 vulnerabilities

CVE-2026-11739 [MEDIUM] CWE-78 CVE-2026-11739: A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-ad A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.

CVE-2025-12946 [HIGH] CWE-20 CVE-2025-12946: A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper i A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques (MiTM) to manipulate DNS responses and execute commands when speedtests are run. This issue affects RS700: through 1.0.7.82; RAX54Sv2 : before V1.1.6

CVE-2026-11734 [LOW] CWE-121 CVE-2026-11734: A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to c A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.