Skip to main content

NETGEAR Router CVE-2026-11738

| EUVDEUVD-2026-56193 MEDIUM
Improper Input Validation (CWE-20)
2026-08-11 NETGEAR GHSA-vq25-x3jw-cmr7
Netgear Authentication Bypass R7000 Raxe500 Rs700
4.3
CVSS 4.0 · Vendor: NETGEAR
Share

Severity by source

Vendor (NETGEAR) PRIMARY
4.3 MEDIUM
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber
vuln.today AI
4.5 MEDIUM

Adjacent-network access and existing admin credentials required; impact is integrity-only with no confidentiality or availability consequence to the router.

3.1 AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
4.0 AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (NETGEAR).

CVSS VectorVendor: NETGEAR

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
X

Lifecycle Timeline

1
Analysis Generated
Aug 11, 2026 - 16:12 vuln.today

DescriptionCVE.org

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.

AnalysisAI

Insufficient input validation across three NETGEAR router models - R7000, RAXE500, and RS700 - permits authenticated administrators with adjacent network access to make unauthorized modifications to router software and core functionality beyond what their role should allow. The flaw is classified as CWE-20 and carries a CVSS 4.0 score of 4.3, constrained to local-network, high-privilege attack scenarios with no observed public exploitation. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Gain adjacent network position
Delivery
Obtain or compromise router admin credentials
Exploit
Access administrative web interface
Execution
Submit crafted malformed input
Persist
Bypass input validation controls
Impact
Modify router firmware or persistent configuration
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires two simultaneous prerequisites that substantially narrow the real-world attack surface. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 vector (AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N) firmly limits real-world risk: an attacker must already hold administrator credentials and be present on the adjacent local network segment, placing exploitation squarely in insider-threat or post-compromise scenarios. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker who has acquired router administrator credentials - via phishing, credential reuse against the default password, or LAN-side reconnaissance - connects to the same network segment as the affected NETGEAR device and submits specially crafted input through the administrative web interface. The lack of adequate input validation allows the malicious values to bypass intended constraints and make unauthorized modifications to router firmware settings or core functionality, such as altering DNS servers, firewall rules, or update mechanisms. …
Remediation Patch available per vendor advisory - apply the current firmware update for each affected model via NETGEAR's product support pages: RAXE500 at https://www.netgear.com/support/product/raxe500/, R7000 at https://www.netgear.com/support/product/r7000/, and RS700 at https://www.netgear.com/support/product/rs700/. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in R7000

View all
CVE-2026-9210 MEDIUM
4.9 Jun 09

Insufficient input validation across 30+ NETGEAR router, range extender, and mesh networking models enables local networ
CVE-2026-0417 MEDIUM
4.3 Jun 09

Integrity tampering in NETGEAR router and mesh network firmware allows authenticated administrators on the local network
CVE-2026-9214 MEDIUM
4.3 Aug 11

**Potential prompt injection detected — flagging before proceeding.** The CVE data you provided contains an embedded "E
CVE-2026-0410 LOW
1.9 Jun 09

Integrity controls on multiple NETGEAR router firmware lines can be subverted by authenticated administrators on the loc
CVE-2026-11735 LOW
1.9 Aug 11

Stack-based buffer overflow in multiple NETGEAR router models (R7000, RAX and XR series) allows an authenticated admin u

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2026-11738 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy