Authentication Bypass in NETGEAR RAX Series Devices
CVE-2026-11731

6.3MEDIUM

Key Information:

Vendor

Netgear
Status
Rax30
Rax29
Rax28
Vendor
CVE Published:
13 October 2026

What is CVE-2026-11731?

An authentication bypass vulnerability exists in specific NETGEAR RAX series routers that enables an attacker with adjacent access to breach device security. This flaw allows unauthorized individuals to interact with the management service of the device, leading to potential exposure of sensitive information and modification of crucial administrative settings. Consequently, this vulnerability threatens the confidentiality and integrity of management data, as well as the overall functionality of device management features.

Affected Version(s)

RAX28 0

RAX29 0

RAX30 0

References

https://www.netgear.com/support/product/rax30
productpatch

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Yanming Chen of Guangzhou University
Michael Gentile
.