CVE-2026-11737 | BDVDB-2026-357236 Detail
NETGEARRAX20
Description#
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality.
Impact#
CAPEC-248 Command Injection
Weaknesses#
- CWE-20 Improper Input Validation
References#
- https://www.netgear.com/support/product/rax20/
- https://www.netgear.com/support/product/rax42/
- https://www.netgear.com/support/product/rax41v2/
- https://www.netgear.com/support/product/rax42v2/
- https://www.netgear.com/support/product/rax41/
- https://www.netgear.com/support/product/rax43/
- https://www.netgear.com/support/product/rax45/
- https://www.netgear.com/support/product/rax49s/
- https://www.netgear.com/support/product/rax50/
- https://www.netgear.com/support/product/rax43v2/
- https://www.netgear.com/support/product/rax50v2/
- https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.