Record summary

CVE-2026-11739 has a selected CVSS score of 4.9 (medium).

Description

A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 11, 2026 · Source: CVE List

Affected products and versions

Showing 12 of 27
ProductSourceVersion rangeStatus

Default status: unaffected

CVE ListBefore V1.1.8.142affected

Default status: unaffected

CVE ListBefore V1.0.4.48affected

Default status: unaffected

CVE ListBefore V1.0.2.46affected

Default status: unaffected

CVE ListBefore V1.1.8.142affected

Default status: unaffected

CVE ListBefore V1.0.4.48affected

Default status: unaffected

CVE ListBefore V1.0.2.46affected

Default status: unaffected

CVE ListBefore V1.0.17.142affected

Default status: unaffected

CVE ListBefore V1.0.11.148affected

Default status: unaffected

CVE ListBefore V1.0.17.142affected

Default status: unaffected

CVE ListBefore V1.0.17.142affected

Default status: unaffected

CVE ListBefore V1.1.6.36affected

Default status: unaffected

CVE ListBefore V1.1.6.36affected

References

Showing 12 of 27