CVE-2026-11731
Authentication Bypass Vulnerability in Certain NETGEAR RAX Series Models
- State
- Published
- Severity
- 6.3 Medium
- Published
- Oct 13, 2026
- Updated
- Oct 16, 2026
- Reserved
- Jun 9, 2026
Description
An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the confidentiality and integrity of management data and the availability of device-management functions.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.3 Medium | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:Y/V:D/U:Amber | NETGEAR |
| 3.1 | 8.8 High | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | NETGEAR |
Weaknesses
- CWE-288 Authentication bypass using an alternate path or channel
Affected Products
| Product | Versions |
|---|---|
RAX30NETGEAR |
|
RAX29NETGEAR |
|
RAX28NETGEAR |
|
References
- https://www.netgear.com/support/product/rax30productpatch
- https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisoryvendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.