CVE-2026-11738
MEDIUM4.4CVSS v3
—CVSS v2
0.27%
EPSS (exploit probability)
CWE-20CWE
Description
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
CVSS v3 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Affected routers (1)
| Vendor | Model | Matched via | Affected versions | Fixed in | Patch Status |
|---|---|---|---|---|---|
| Netgear | Netgear Nighthawk RAX120 | — |
versionEndExcluding=1.2.10.56 | 1.2.10.56 | Patched |