VulnerabilityAnalyzed
CVE-2026-11738
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
MEDIUM 4.3EPSS 0.27%
Does this matter?
Lower severity and a low EPSS score (0.27%). Track it; it rarely justifies an emergency change on its own.
Description
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
- CVSS 4.0
- 4.3 MEDIUMCVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.27% probability · 19th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- netgear/be9300 firmware · netgear/mr60 firmware · netgear/ms60 firmware · netgear/r6700ax firmware · netgear/rax10 firmware · netgear/rax120 firmware · netgear/rax120v2 firmware · netgear/rax20 firmware · netgear/rax28 firmware · netgear/rax29 firmware · netgear/rax30 firmware · netgear/rax36s firmware · netgear/rax43 firmware · netgear/rax45 firmware · netgear/rax50 firmware · netgear/rax70 firmware · netgear/rbr760 firmware · netgear/rbs760 firmware · netgear/rs100 firmware · netgear/rs200 firmware · +6 more
- Source
- a2826606-91e7-4eb6-899e-8484bd4575d5
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.