CVE-2026-11734

Device administrator can interrupt the normal operation of some NETGEAR Nighthawk devices.

State: Published
Severity: 1.1 Low
Published: Aug 11, 2026
Updated: Aug 12, 2026
Reserved: Jun 9, 2026

Description

A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.

Scores

CVSS	Score	Vector	Source
4.0	1.1 Low	CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/AU:Y/R:U/V:D/RE:L/U:Amber	NETGEAR

Weaknesses

CWE-121 Stack-based buffer overflow

Affected Products

Product	Versions
MR70NETGEAR	before V1.0.4.48Affected
MR90NETGEAR	before V1.0.2.46Affected
MS70NETGEAR	before V1.0.4.48Affected
MS90NETGEAR	before V1.0.2.46Affected
RAX41NETGEAR	before V1.1.6.36Affected
RAX41v2NETGEAR	before V1.1.6.36Affected
RAX42NETGEAR	before V1.1.6.36Affected
RAX42v2NETGEAR	before V1.1.6.36Affected
RAX43NETGEAR	before V1.1.6.36Affected
RAX43v2NETGEAR	before V1.1.6.36Affected
RAX49SNETGEAR	before V1.1.6.36Affected
RAX50NETGEAR	before V1.1.6.36Affected
RAX50v2NETGEAR	before V1.1.6.36Affected
RAX54SNETGEAR	before V1.1.6.36Affected
RAX54Sv2NETGEAR	before V1.1.6.36Affected

References

https://www.netgear.com/support/product/mr70/productpatch
https://www.netgear.com/support/product/mr90/productpatch
https://www.netgear.com/support/product/ms90/productpatch
https://www.netgear.com/support/product/rax41/productpatch
https://www.netgear.com/support/product/rax41v2/productpatch
https://www.netgear.com/support/product/rax43/productpatch
https://www.netgear.com/support/product/rax50/productpatch
https://www.netgear.com/support/product/ms70/productpatch
https://www.netgear.com/support/product/rax50v2/productpatch
https://www.netgear.com/support/product/rax42v2/productpatch
https://www.netgear.com/support/product/rax42/productpatch
https://www.netgear.com/support/product/rax49s/productpatch
https://www.netgear.com/support/product/rax43v2/productpatch
https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisoryvendor-advisorypatch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.