CVE-2026-11739
MEDIUM6.4CVSS v3
—CVSS v2
1.07%
EPSS (exploit probability)
CWE-78CWE
Description
A command injection vulnerability in certain affected NETGEAR Nighthawk
devices allows a network-adjacent attacker with the ability to intercept
and modify local network traffic (attacker in the middle) to compromise
the confidentiality and integrity of the affected device.
CVSS v3 vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Affected routers (2)
| Vendor | Model | Matched via | Affected versions | Fixed in | Patch Status |
|---|---|---|---|---|---|
| Netgear | Netgear Nighthawk RAX200 | — |
versionEndExcluding=1.0.11.148 | 1.0.11.148 | Patched |
| Netgear | Netgear Nighthawk RAX80 | — |
versionEndExcluding=1.0.11.148 | 1.0.11.148 | Patched |