CVE-2026-11814
Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers
- State
- Published
- Severity
- 4.9 Medium
- Published
- Aug 11, 2026
- Updated
- Aug 12, 2026
- Reserved
- Jun 9, 2026
Description
A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 4.9 Medium | CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:L/U:Amber | NETGEAR |
Weaknesses
- CWE-295 Improper certificate validation
Affected Products
| Product | Versions |
|---|---|
BE9300NETGEAR |
|
MR60NETGEAR |
|
MS60NETGEAR |
|
R6700AXNETGEAR |
|
RAX10NETGEAR |
|
RAX120NETGEAR |
|
RAX120v2NETGEAR |
|
RAX20NETGEAR |
|
RAX28NETGEAR |
|
RAX29NETGEAR |
|
RAX30NETGEAR |
|
RAX36SNETGEAR |
|
RAX43NETGEAR |
|
RAX45NETGEAR |
|
RAX50NETGEAR |
|
RAX70NETGEAR |
|
RBR760NETGEAR |
|
RBS760NETGEAR |
|
RS100NETGEAR |
|
RS200NETGEAR |
|
RS280NETGEAR |
|
RS300NETGEAR |
|
RS500NETGEAR |
|
RS600NETGEAR |
|
RS70NETGEAR |
|
RS90NETGEAR |
|
References
- https://www.netgear.com/support/product/mr60/productpatch
- https://www.netgear.com/support/product/be9300/productpatch
- https://www.netgear.com/support/product/ms60/productpatch
- https://www.netgear.com/support/product/r6700ax/productpatch
- https://www.netgear.com/support/product/rax10/productpatch
- https://www.netgear.com/support/product/rax120/productpatch
- https://www.netgear.com/support/product/rax120v2/productpatch
- https://www.netgear.com/support/product/rax20/productpatch
- https://www.netgear.com/support/product/rax29/productpatch
- https://www.netgear.com/support/product/rax28/productpatch
- https://www.netgear.com/support/product/rax30/productpatch
- https://www.netgear.com/support/product/rax36s/productpatch
- https://www.netgear.com/support/product/rax45/productpatch
- https://www.netgear.com/support/product/rax43/productpatch
- https://www.netgear.com/support/product/rax50/productpatch
- https://www.netgear.com/support/product/rax70/productpatch
- https://www.netgear.com/support/product/rbr760/productpatch
- https://www.netgear.com/support/product/rs280/productpatch
- https://www.netgear.com/support/product/rbs760/productpatch
- https://www.netgear.com/support/product/rs200/productpatch
- https://www.netgear.com/support/product/rs300/productpatch
- https://www.netgear.com/support/product/rs100/productpatch
- https://www.netgear.com/support/product/rs70/productpatch
- https://www.netgear.com/support/product/rs600/productpatch
- https://www.netgear.com/support/product/rs500/productpatch
- https://www.netgear.com/support/product/rs90/productpatch
- https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisoryvendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.