Insufficient Input Validation Vulnerability in NETGEAR Routers
CVE-2026-11738

4.3MEDIUM

Key Information:

Vendor

Netgear
Status
R7000
Raxe500
Rs700
Vendor
CVE Published:
11 August 2026

What is CVE-2026-11738?

An insufficient input validation vulnerability exists in certain NETGEAR router models, enabling authenticated administrators connected to the local network to perform unauthorized modifications to the router's software and functionality. This flaw could potentially compromise the security and operational integrity of affected networking devices.

Affected Version(s)

R7000 0

RAXE500 0

RS700 0

References

https://www.netgear.com/support/product/r7000/
productpatch
https://www.netgear.com/support/product/rs700/
productpatch
https://www.netgear.com/support/product/raxe500/
productpatch

CVSS V4

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

fxc233
.