Insufficient Input Validation in NETGEAR Models
CVE-2026-11737

4.3MEDIUM

Key Information:

Vendor

Netgear
Status
Rax20
Rax41
Rax41v2
Rax42
Vendor
CVE Published:
11 August 2026

What is CVE-2026-11737?

An insufficient input validation vulnerability exists in several NETGEAR router models, enabling authenticated administrators connected to the local network to perform unauthorized modifications to the device's software and its functionality. This flaw can lead to potential exploitation, allowing for changes that may compromise network security and device integrity.

Affected Version(s)

RAX20 0

RAX41 0

RAX41v2 0

References

https://www.netgear.com/support/product/rax20/
productpatch
https://www.netgear.com/support/product/rax42/
productpatch
https://www.netgear.com/support/product/rax41v2/
productpatch

CVSS V4

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Matt19
.