Command Injection Vulnerability in NETGEAR Nighthawk Products
CVE-2026-11739

4.9MEDIUM

Key Information:

Vendor

Netgear
Status
Mr60
Mr70
Mr90
Ms60
Vendor
CVE Published:
11 August 2026

What is CVE-2026-11739?

A command injection vulnerability exists in a range of NETGEAR Nighthawk devices. This flaw enables an attacker adjacent to the network to intercept and manipulate local traffic, potentially compromising the device’s confidentiality and integrity. Users are urged to apply available patches to mitigate risks associated with this security issue.

Affected Version(s)

MR60 0

MR70 0

MR90 0

References

https://www.netgear.com/support/product/mr60/
productpatch
https://www.netgear.com/support/product/mr70/
productpatch
https://www.netgear.com/support/product/ms90/
productpatch

CVSS V4

Score:
4.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

fluorescent
.