CVE-2026-11736

Summary

A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality.

Affected Software

VendorProductVersion RangeStatus
NETGEARRAX200 < *affected
NETGEARRAX35v20 < V1.0.16.132affected
NETGEARRAX410 < *affected
NETGEARRAX41v20 < V1.1.4.28affected
NETGEARRAX420 < *affected
NETGEARRAX42v20 < V1.1.4.28affected
NETGEARRAX430 < V1.0.16.132affected
NETGEARRAX43v20 < V1.1.4.28affected
NETGEARRAX450 < *affected
NETGEARRAX49S0 < V1.1.4.28affected
NETGEARRAX500 < V1.0.16.132affected
NETGEARRAX50S0 < *affected
NETGEARRAX50v20 < V1.1.4.28affected
NETGEARRAX54Sv20 < V1.1.4.28affected
NETGEARRAX54v20 < V1.1.4.28affected
NETGEARRAXE4500 < *affected
NETGEARRAXE5000 < V1.2.14.114affected
NETGEARXR10000 < V1.1.0.22affected
NETGEARXR1000v20 < V1.1.0.22affected

Weaknesses

  • CWE-20: CWE-20 Improper input validation

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References