Skip to content
CVE PROGRAM SOURCE RECORD1.9 Low

CVE-2026-11735

Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models

Description

A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NETGEAR R7000

Default version status: affected

  • 0 to < *affected

NETGEAR RAX20

Default version status: affected

  • 0 to < *affected

NETGEAR RAX35v2

Default version status: unaffected

  • 0 to < V1.0.16.132affected

NETGEAR RAX41

Default version status: affected

  • 0 to < *affected

NETGEAR RAX41v2

Default version status: unaffected

  • 0 to < V1.1.4.28affected

NETGEAR RAX42

Default version status: affected

  • 0 to < *affected

NETGEAR RAX42v2

Default version status: unaffected

  • 0 to < V1.1.4.28affected

NETGEAR RAX43

Default version status: unaffected

  • 0 to < V1.0.16.132affected

NETGEAR RAX43v2

Default version status: unaffected

  • 0 to < V1.1.4.28affected

NETGEAR RAX45

Default version status: affected

  • 0 to < *affected

NETGEAR RAX49S

Default version status: unaffected

  • 0 to < V1.1.4.28affected

NETGEAR RAX50

Default version status: unaffected

  • 0 to < V1.0.16.132affected

NETGEAR RAX50S

Default version status: unaffected

  • 0 to < V1.0.16.132affected

NETGEAR RAX50v2

Default version status: unaffected

  • 0 to < V1.1.4.28affected

NETGEAR RAX54Sv2

Default version status: unaffected

  • 0 to < V1.1.4.28affected

NETGEAR RAX54v2

Default version status: unaffected

  • 0 to < V1.1.4.28affected

NETGEAR RAXE450

Default version status: affected

  • 0 to < *affected

NETGEAR RAXE500

Default version status: unaffected

  • 0 to < V1.2.14.114affected

NETGEAR XR1000

Default version status: unaffected

  • 0 to < V1.1.0.22affected

NETGEAR XR1000v2

Default version status: unaffected

  • 0 to < V1.1.0.22affected

References