Insufficient Input Validation Vulnerability in NETGEAR Router Models
CVE-2026-11732

6.3MEDIUM

Key Information:

Vendor

Netgear

Status
Vendor
CVE Published:
13 October 2026

What is CVE-2026-11732?

A vulnerability exists in the Block Sites feature of specific NETGEAR router models that allows a network-adjacent attacker with access to the network to execute unauthorized commands. This security weakness highlights the importance of secure input handling. The risk is present only when the Block Sites feature is activated, potentially compromising the router's confidentiality, integrity, and availability.

Affected Version(s)

CAX30 0

RAX30 0

RAX5 0

References

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

kaoken
.