Skip to content
CVE PROGRAM SOURCE RECORD4.9 Medium

CVE-2026-11814

Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NETGEAR

Description

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NETGEAR BE9300

Default version status: unaffected

  • 0 to < V1.0.1.84affected

NETGEAR MR60

Default version status: unaffected

  • 0 to < V1.1.8.142affected

NETGEAR MS60

Default version status: unaffected

  • 0 to < V1.1.8.142affected

NETGEAR R6700AX

Default version status: unaffected

  • 0 to < V1.0.18.164affected

NETGEAR RAX10

Default version status: unaffected

  • 0 to < V1.0.5.50affected

NETGEAR RAX120

Default version status: unaffected

  • 0 to < V1.2.10.56affected

NETGEAR RAX120v2

Default version status: unaffected

  • 0 to < V1.2.10.56affected

NETGEAR RAX20

Default version status: unaffected

  • 0 to < V1.0.17.142affected

NETGEAR RAX28

Default version status: unaffected

  • 0 to < V1.0.14.108affected

NETGEAR RAX29

Default version status: unaffected

  • 0 to < V1.0.14.108affected

NETGEAR RAX30

Default version status: unaffected

  • 0 to < V1.0.14.108affected

NETGEAR RAX36S

Default version status: unaffected

  • 0 to < V1.0.5.50affected

NETGEAR RAX43

Default version status: unaffected

  • 0 to < V1.0.17.142affected

NETGEAR RAX45

Default version status: unaffected

  • 0 to < V1.0.17.142affected

NETGEAR RAX50

Default version status: unaffected

  • 0 to < V1.0.17.142affected

NETGEAR RAX70

Default version status: unaffected

  • 0 to < V1.0.19.172affected

NETGEAR RBR760

Default version status: unaffected

  • 0 to < V6.3.8.11affected

NETGEAR RBS760

Default version status: unaffected

  • 0 to < V6.3.8.11affected

NETGEAR RS100

Default version status: unaffected

  • 0 to < V1.0.1.80affected

NETGEAR RS200

Default version status: unaffected

  • 0 to < V1.0.1.90affected

NETGEAR RS280

Default version status: unaffected

  • 0 to < V1.0.1.90affected

NETGEAR RS300

Default version status: unaffected

  • 0 to < V1.0.1.90affected

NETGEAR RS500

Default version status: unaffected

  • 0 to < V1.0.1.90affected

NETGEAR RS600

Default version status: unaffected

  • 0 to < V1.0.1.90affected

NETGEAR RS70

Default version status: unaffected

  • 0 to < V1.0.1.80affected

NETGEAR RS90

Default version status: unaffected

  • 0 to < V1.0.1.80affected

References