CVE-2026-11738

MEDIUM

Insufficient input validation in certain NETGEAR Nighthawk routers allows administrators to tamper with the device.

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-11738 has a selected CVSS score of 4.3 (medium).

Description

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 11, 2026 · Source: CVE List

Affected products and versions

3
ProductSourceVersion range

R7000

Browse NETGEAR / R7000

Default status: affected

CVE ListBefore *affected

RAXE500

Browse NETGEAR / RAXE500

Default status: unaffected

CVE ListBefore V1.2.14.114affected

RS700

Browse NETGEAR / RS700

Default status: unaffected

CVE ListBefore V1.0.7.66affected

References

5