Command Injection Vulnerability in NETGEAR Devices
CVE-2026-11814

4.9MEDIUM

Key Information:

Vendor

Netgear

Status
Vendor
CVE Published:
11 August 2026

What is CVE-2026-11814?

A command injection vulnerability exists in several NETGEAR router models, enabling a network-adjacent attacker to intercept and manipulate local network traffic. This vulnerability poses a risk to the confidentiality and integrity of the affected devices, making it essential for users to apply any available patches. The issue is restricted to specific region-based SKUs, highlighting the need for vigilance among users in affected areas.

Affected Version(s)

BE9300 0

MR60 0

MS60 0

References

CVSS V4

Score:
4.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

nobodyisnobody
.