CVE-2026-11814

Tuesday, August 11, 2026

4.9

CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:L/U:Amber

Summary

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.

Affected Software

Vendor	Product	Version Range	Status
NETGEAR	BE9300	`0 < V1.0.1.84`	affected
NETGEAR	MR60	`0 < V1.1.8.142`	affected
NETGEAR	MS60	`0 < V1.1.8.142`	affected
NETGEAR	R6700AX	`0 < V1.0.18.164`	affected
NETGEAR	RAX10	`0 < V1.0.5.50`	affected
NETGEAR	RAX120	`0 < V1.2.10.56`	affected
NETGEAR	RAX120v2	`0 < V1.2.10.56`	affected
NETGEAR	RAX20	`0 < V1.0.17.142`	affected
NETGEAR	RAX28	`0 < V1.0.14.108`	affected
NETGEAR	RAX29	`0 < V1.0.14.108`	affected
NETGEAR	RAX30	`0 < V1.0.14.108`	affected
NETGEAR	RAX36S	`0 < V1.0.5.50`	affected
NETGEAR	RAX43	`0 < V1.0.17.142`	affected
NETGEAR	RAX45	`0 < V1.0.17.142`	affected
NETGEAR	RAX50	`0 < V1.0.17.142`	affected
NETGEAR	RAX70	`0 < V1.0.19.172`	affected
NETGEAR	RBR760	`0 < V6.3.8.11`	affected
NETGEAR	RBS760	`0 < V6.3.8.11`	affected
NETGEAR	RS100	`0 < V1.0.1.80`	affected
NETGEAR	RS200	`0 < V1.0.1.90`	affected
NETGEAR	RS280	`0 < V1.0.1.90`	affected
NETGEAR	RS300	`0 < V1.0.1.90`	affected
NETGEAR	RS500	`0 < V1.0.1.90`	affected
NETGEAR	RS600	`0 < V1.0.1.90`	affected
NETGEAR	RS70	`0 < V1.0.1.80`	affected
NETGEAR	RS90	`0 < V1.0.1.80`	affected

Weaknesses

CWE-295: CWE-295 Improper certificate validation

References

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.