Skip to content
CVE PROGRAM SOURCE RECORD4.9 Medium

CVE-2026-11739

Command injection vulnerability in some NETGEAR Nighthawk devices

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NETGEAR

Description

A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NETGEAR MR60

Default version status: unaffected

  • 0 to < V1.1.8.142affected

NETGEAR MR70

Default version status: unaffected

  • 0 to < V1.0.4.48affected

NETGEAR MR90

Default version status: unaffected

  • 0 to < V1.0.2.46affected

NETGEAR MS60

Default version status: unaffected

  • 0 to < V1.1.8.142affected

NETGEAR MS70

Default version status: unaffected

  • 0 to < V1.0.4.48affected

NETGEAR MS90

Default version status: unaffected

  • 0 to < V1.0.2.46affected

NETGEAR RAX20

Default version status: unaffected

  • 0 to < V1.0.17.142affected

NETGEAR RAX200

Default version status: unaffected

  • 0 to < V1.0.11.148affected

NETGEAR RAX35

Default version status: unaffected

  • 0 to < V1.0.17.142affected

NETGEAR RAX35v2

Default version status: unaffected

  • 0 to < V1.0.17.142affected

NETGEAR RAX41

Default version status: unaffected

  • 0 to < V1.1.6.36affected

NETGEAR RAX41v2

Default version status: unaffected

  • 0 to < V1.1.6.36affected

NETGEAR RAX42

Default version status: unaffected

  • 0 to < V1.1.6.36affected

NETGEAR RAX42v2

Default version status: unaffected

  • 0 to < V1.1.6.36affected

NETGEAR RAX43

Default version status: unaffected

  • 0 to < V1.1.6.36affected

NETGEAR RAX43v2

Default version status: unaffected

  • 0 to < V1.1.6.36affected

NETGEAR RAX45

Default version status: unaffected

  • 0 to < V1.0.17.142affected

NETGEAR RAX49S

Default version status: unaffected

  • 0 to < V1.1.6.36affected

NETGEAR RAX50

Default version status: unaffected

  • 0 to < V1.1.6.36affected

NETGEAR RAX50v2

Default version status: unaffected

  • 0 to < V1.1.6.36affected

NETGEAR RAX54S

Default version status: unaffected

  • 0 to < V1.1.6.36affected

NETGEAR RAX54Sv2

Default version status: unaffected

  • 0 to < V1.1.6.36affected

NETGEAR RAX80

Default version status: unaffected

  • 0 to < V1.0.11.148affected

NETGEAR RAXE500

Default version status: unaffected

  • 0 to < V1.2.14.110affected

NETGEAR RS700

Default version status: unaffected

  • 0 to < V1.0.9.6affected

NETGEAR XR1000

Default version status: unaffected

  • 0 to < V1.1.0.22affected

NETGEAR XR1000v2

Default version status: unaffected

  • 0 to < V1.1.0.22affected

References