Riskcovery

CVE-2026-11735

Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models

State
Published
Severity
1.9 Low
Published
Aug 11, 2026
Updated
Aug 12, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.

Scores

CVSSScoreVectorSource
4.01.9 LowCVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:Y/R:U/V:D/RE:L/U:AmberNETGEAR

Weaknesses

  • CWE-121 Stack-based buffer overflow

Affected Products

ProductVersions
R7000NETGEAR
  • all versionsAffected
RAX20NETGEAR
  • all versionsAffected
RAX35v2NETGEAR
  • before V1.0.16.132Affected
RAX41NETGEAR
  • all versionsAffected
RAX41v2NETGEAR
  • before V1.1.4.28Affected
RAX42NETGEAR
  • all versionsAffected
RAX42v2NETGEAR
  • before V1.1.4.28Affected
RAX43NETGEAR
  • before V1.0.16.132Affected
RAX43v2NETGEAR
  • before V1.1.4.28Affected
RAX45NETGEAR
  • all versionsAffected
RAX49SNETGEAR
  • before V1.1.4.28Affected
RAX50NETGEAR
  • before V1.0.16.132Affected
RAX50SNETGEAR
  • before V1.0.16.132Affected
RAX50v2NETGEAR
  • before V1.1.4.28Affected
RAX54Sv2NETGEAR
  • before V1.1.4.28Affected
RAX54v2NETGEAR
  • before V1.1.4.28Affected
RAXE450NETGEAR
  • all versionsAffected
RAXE500NETGEAR
  • before V1.2.14.114Affected
XR1000NETGEAR
  • before V1.1.0.22Affected
XR1000v2NETGEAR
  • before V1.1.0.22Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.