CVE-2026-11814 | BDVDB-2026-357239 Detail
NETGEARBE9300
Description#
A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.
Impact#
CAPEC-94 Adversary in the Middle (AiTM)
Weaknesses#
- CWE-295 Improper certificate validation
References#
- https://www.netgear.com/support/product/mr60/
- https://www.netgear.com/support/product/be9300/
- https://www.netgear.com/support/product/ms60/
- https://www.netgear.com/support/product/r6700ax/
- https://www.netgear.com/support/product/rax10/
- https://www.netgear.com/support/product/rax120/
- https://www.netgear.com/support/product/rax120v2/
- https://www.netgear.com/support/product/rax20/
- https://www.netgear.com/support/product/rax29/
- https://www.netgear.com/support/product/rax28/
- https://www.netgear.com/support/product/rax30/
- https://www.netgear.com/support/product/rax36s/
- https://www.netgear.com/support/product/rax45/
- https://www.netgear.com/support/product/rax43/
- https://www.netgear.com/support/product/rax50/
Show all 27
- https://www.netgear.com/support/product/rax70/
- https://www.netgear.com/support/product/rbr760/
- https://www.netgear.com/support/product/rs280/
- https://www.netgear.com/support/product/rbs760/
- https://www.netgear.com/support/product/rs200/
- https://www.netgear.com/support/product/rs300/
- https://www.netgear.com/support/product/rs100/
- https://www.netgear.com/support/product/rs70/
- https://www.netgear.com/support/product/rs600/
- https://www.netgear.com/support/product/rs500/
- https://www.netgear.com/support/product/rs90/
- https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.