CVE-2026-11738
Medium
Description
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
SeverityMedium
CVSS4.4
Exploit probability—
Product
Netgear Be9300 Firmware
PublishedAug 11, 2026
First seenAug 11, 2026
Weakness typeCWE-20Improper input validation
How to fix
Update
- netgear be9300_firmware1.0.1.84 or later
- netgear mr60_firmware1.1.8.142 or later
- netgear ms60_firmware1.1.8.142 or later
- netgear r6700ax_firmware1.0.18.164 or later
- netgear rax10_firmware1.0.5.50 or later
- netgear rax120_firmware1.2.10.56 or later
- netgear rax120v2_firmware1.2.10.56 or later
- netgear rax20_firmware1.0.17.142 or later
- netgear rax28_firmware1.0.14.108 or later
- netgear rax29_firmware1.0.14.108 or later
- netgear rax30_firmware1.0.14.108 or later
- netgear rax36s_firmware1.0.5.50 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netgear be9300_firmware | v < 1.0.1.84 | 1.0.1.84 |
| netgear mr60_firmware | v < 1.1.8.142 | 1.1.8.142 |
| netgear ms60_firmware | v < 1.1.8.142 | 1.1.8.142 |
| netgear r6700ax_firmware | v < 1.0.18.164 | 1.0.18.164 |
| netgear rax10_firmware | v < 1.0.5.50 | 1.0.5.50 |
| netgear rax120_firmware | v < 1.2.10.56 | 1.2.10.56 |
| netgear rax120v2_firmware | v < 1.2.10.56 | 1.2.10.56 |
| netgear rax20_firmware | v < 1.0.17.142 | 1.0.17.142 |
| netgear rax28_firmware | v < 1.0.14.108 | 1.0.14.108 |
| netgear rax29_firmware | v < 1.0.14.108 | 1.0.14.108 |
| netgear rax30_firmware | v < 1.0.14.108 | 1.0.14.108 |
| netgear rax36s_firmware | v < 1.0.5.50 | 1.0.5.50 |
| netgear rax43_firmware | v < 1.0.17.142 | 1.0.17.142 |
| netgear rax45_firmware | v < 1.0.17.142 | 1.0.17.142 |
| netgear rax50_firmware | v < 1.0.17.142 | 1.0.17.142 |
| netgear rax70_firmware | v < 1.0.19.172 | 1.0.19.172 |
| netgear rbr760_firmware | v < 6.3.8.11 | 6.3.8.11 |
| netgear rbs760_firmware | v < 6.3.8.11 | 6.3.8.11 |
| netgear rs100_firmware | v < 1.0.1.80 | 1.0.1.80 |
| netgear rs200_firmware | v < 1.0.1.90 | 1.0.1.90 |
| netgear rs280_firmware | v < 1.0.1.90 | 1.0.1.90 |
| netgear rs300_firmware | v < 1.0.1.90 | 1.0.1.90 |
| netgear rs500_firmware | v < 1.0.1.90 | 1.0.1.90 |
| netgear rs600_firmware | v < 1.0.1.90 | 1.0.1.90 |
| netgear rs70_firmware | v < 1.0.1.80 | 1.0.1.80 |
| netgear rs90_firmware | v < 1.0.1.80 | 1.0.1.80 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.