← CVE Intelligence

CVE-2026-11737

Some NETGEAR Nighthawk devices allow administrators to tamper with the device PUBLISHED

Description (CNA)

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality.

Affected (CNA)

Vendor / productVersions
NETGEAR / RAX20affected 0 before V1.0.18.144
NETGEAR / RAX41affected 0 before V1.1.6.36
NETGEAR / RAX41v2affected 0 before V1.1.6.36
NETGEAR / RAX42affected 0 before V1.1.6.36
NETGEAR / RAX42v2affected 0 before V1.1.6.36
NETGEAR / RAX43affected 0 before V1.1.6.36
NETGEAR / RAX43v2affected 0 before V1.1.6.36
NETGEAR / RAX45affected 0 before V1.0.17.142
NETGEAR / RAX49Saffected 0 before V1.1.6.36
NETGEAR / RAX50affected 0 before V1.1.6.36
NETGEAR / RAX50v2affected 0 before V1.1.6.36
NETGEAR / RAX54Saffected 0 before V1.1.6.36
NETGEAR / RAX54Sv2affected 0 before V1.1.6.36

CWE

CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.