Command injection vulnerability in some NETGEAR Nighthawk devices
Priority LOW 29CWE-78Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Attack requirements
- Present
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-78.
Summary
A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0255 85th percentileScored 2026-11-07
Fix Fixed MR60 (NETGEAR): V1.1.8.142MR70 (NETGEAR): V1.0.4.48+25 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| NETGEAR | MR60 | before V1.1.8.142 | V1.1.8.142 | Patch available | CNA |
| NETGEAR | MR70 | before V1.0.4.48 | V1.0.4.48 | Patch available | CNA |
| NETGEAR | MR90 | before V1.0.2.46 | V1.0.2.46 | Patch available | CNA |
| NETGEAR | MS60 | before V1.1.8.142 | V1.1.8.142 | Patch available | CNA |
| NETGEAR | MS70 | before V1.0.4.48 | V1.0.4.48 | Patch available | CNA |
| NETGEAR | MS90 | before V1.0.2.46 | V1.0.2.46 | Patch available | CNA |
| NETGEAR | RAX20 | before V1.0.17.142 | V1.0.17.142 | Patch available | CNA |
| NETGEAR | RAX200 | before V1.0.11.148 | V1.0.11.148 | Patch available | CNA |
| NETGEAR | RAX35 | before V1.0.17.142 | V1.0.17.142 | Patch available | CNA |
| NETGEAR | RAX35v2 | before V1.0.17.142 | V1.0.17.142 | Patch available | CNA |
| NETGEAR | RAX41 | before V1.1.6.36 | V1.1.6.36 | Patch available | CNA |
| NETGEAR | RAX41v2 | before V1.1.6.36 | V1.1.6.36 | Patch available | CNA |
| NETGEAR | RAX42 | before V1.1.6.36 | V1.1.6.36 | Patch available | CNA |
| NETGEAR | RAX42v2 | before V1.1.6.36 | V1.1.6.36 | Patch available | CNA |
| NETGEAR | RAX43 | before V1.1.6.36 | V1.1.6.36 | Patch available | CNA |
| NETGEAR | RAX43v2 | before V1.1.6.36 | V1.1.6.36 | Patch available | CNA |
| NETGEAR | RAX45 | before V1.0.17.142 | V1.0.17.142 | Patch available | CNA |
| NETGEAR | RAX49S | before V1.1.6.36 | V1.1.6.36 | Patch available | CNA |
| NETGEAR | RAX50 | before V1.1.6.36 | V1.1.6.36 | Patch available | CNA |
| NETGEAR | RAX50v2 | before V1.1.6.36 | V1.1.6.36 | Patch available | CNA |
| NETGEAR | RAX54S | before V1.1.6.36 | V1.1.6.36 | Patch available | CNA |
| NETGEAR | RAX54Sv2 | before V1.1.6.36 | V1.1.6.36 | Patch available | CNA |
| NETGEAR | RAX80 | before V1.0.11.148 | V1.0.11.148 | Patch available | CNA |
| NETGEAR | RAXE500 | before V1.2.14.110 | V1.2.14.110 | Patch available | CNA |
| NETGEAR | RS700 | before V1.0.9.6 | V1.0.9.6 | Patch available | CNA |
| NETGEAR | XR1000 | before V1.1.0.22 | V1.1.0.22 | Patch available | CNA |
| NETGEAR | XR1000v2 | before V1.1.0.22 | V1.1.0.22 | Patch available | CNA |
- MR60 VendorNETGEAR Affected before V1.1.8.142 Fixed in V1.1.8.142 Patch available CNA
- MR70 VendorNETGEAR Affected before V1.0.4.48 Fixed in V1.0.4.48 Patch available CNA
- MR90 VendorNETGEAR Affected before V1.0.2.46 Fixed in V1.0.2.46 Patch available CNA
- MS60 VendorNETGEAR Affected before V1.1.8.142 Fixed in V1.1.8.142 Patch available CNA
- MS70 VendorNETGEAR Affected before V1.0.4.48 Fixed in V1.0.4.48 Patch available CNA
- MS90 VendorNETGEAR Affected before V1.0.2.46 Fixed in V1.0.2.46 Patch available CNA
- RAX20 VendorNETGEAR Affected before V1.0.17.142 Fixed in V1.0.17.142 Patch available CNA
- RAX200 VendorNETGEAR Affected before V1.0.11.148 Fixed in V1.0.11.148 Patch available CNA
- RAX35 VendorNETGEAR Affected before V1.0.17.142 Fixed in V1.0.17.142 Patch available CNA
- RAX35v2 VendorNETGEAR Affected before V1.0.17.142 Fixed in V1.0.17.142 Patch available CNA
- RAX41 VendorNETGEAR Affected before V1.1.6.36 Fixed in V1.1.6.36 Patch available CNA
- RAX41v2 VendorNETGEAR Affected before V1.1.6.36 Fixed in V1.1.6.36 Patch available CNA
- RAX42 VendorNETGEAR Affected before V1.1.6.36 Fixed in V1.1.6.36 Patch available CNA
- RAX42v2 VendorNETGEAR Affected before V1.1.6.36 Fixed in V1.1.6.36 Patch available CNA
- RAX43 VendorNETGEAR Affected before V1.1.6.36 Fixed in V1.1.6.36 Patch available CNA
- RAX43v2 VendorNETGEAR Affected before V1.1.6.36 Fixed in V1.1.6.36 Patch available CNA
- RAX45 VendorNETGEAR Affected before V1.0.17.142 Fixed in V1.0.17.142 Patch available CNA
- RAX49S VendorNETGEAR Affected before V1.1.6.36 Fixed in V1.1.6.36 Patch available CNA
- RAX50 VendorNETGEAR Affected before V1.1.6.36 Fixed in V1.1.6.36 Patch available CNA
- RAX50v2 VendorNETGEAR Affected before V1.1.6.36 Fixed in V1.1.6.36 Patch available CNA
- RAX54S VendorNETGEAR Affected before V1.1.6.36 Fixed in V1.1.6.36 Patch available CNA
- RAX54Sv2 VendorNETGEAR Affected before V1.1.6.36 Fixed in V1.1.6.36 Patch available CNA
- RAX80 VendorNETGEAR Affected before V1.0.11.148 Fixed in V1.0.11.148 Patch available CNA
- RAXE500 VendorNETGEAR Affected before V1.2.14.110 Fixed in V1.2.14.110 Patch available CNA
- RS700 VendorNETGEAR Affected before V1.0.9.6 Fixed in V1.0.9.6 Patch available CNA
- XR1000 VendorNETGEAR Affected before V1.1.0.22 Fixed in V1.1.0.22 Patch available CNA
- XR1000v2 VendorNETGEAR Affected before V1.1.0.22 Fixed in V1.1.0.22 Patch available CNA
CPE configurations NVD · 54
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:netgear:ms90_firmware:*:*:*:*:*:*:*:* | before 1.0.2.46 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:ms90:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:* | before 1.0.17.142 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax200_firmware:*:*:*:*:*:*:*:* | before 1.0.11.148 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax35_firmware:*:*:*:*:*:*:*:* | before 1.0.17.142 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax35:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax35v2_firmware:*:*:*:*:*:*:*:* | before 1.0.17.142 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax35v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
- cpe:2.3:o:netgear:ms90_firmware:*:*:*:*:*:*:*:* Versions before 1.0.2.46 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:ms90:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:* Versions before 1.0.17.142 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax200_firmware:*:*:*:*:*:*:*:* Versions before 1.0.11.148 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax35_firmware:*:*:*:*:*:*:*:* Versions before 1.0.17.142 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax35:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax35v2_firmware:*:*:*:*:*:*:*:* Versions before 1.0.17.142 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax35v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
Show 44 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:netgear:rax41_firmware:*:*:*:*:*:*:*:* | before 1.1.6.36 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax41:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax41v2_firmware:*:*:*:*:*:*:*:* | before 1.1.6.36 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax41v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax42_firmware:*:*:*:*:*:*:*:* | before 1.1.6.36 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax42:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax42v2_firmware:*:*:*:*:*:*:*:* | before 1.1.6.36 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax42v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:* | before 1.1.6.36 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax43v2_firmware:*:*:*:*:*:*:*:* | before 1.1.6.36 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax43v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:* | before 1.0.17.142 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax49s_firmware:*:*:*:*:*:*:*:* | before 1.1.6.36 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax49s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:* | before 1.1.6.36 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax50v2_firmware:*:*:*:*:*:*:*:* | before 1.1.6.36 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax50v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax54s_firmware:*:*:*:*:*:*:*:* | before 1.1.6.36 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax54s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax54sv2_firmware:*:*:*:*:*:*:*:* | before 1.1.6.36 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax54sv2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax80_firmware:*:*:*:*:*:*:*:* | before 1.0.11.148 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax80:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:raxe500_firmware:*:*:*:*:*:*:*:* | before 1.2.14.110 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:raxe500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rs700_firmware:*:*:*:*:*:*:*:* | before 1.0.9.6 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rs700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:xr1000_firmware:*:*:*:*:*:*:*:* | before 1.1.0.22 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:xr1000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:xr1000v2_firmware:*:*:*:*:*:*:*:* | before 1.1.0.22 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:xr1000v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:* | before 1.1.8.142 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:mr70_firmware:*:*:*:*:*:*:*:* | before 1.0.4.48 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:mr70:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:mr90_firmware:*:*:*:*:*:*:*:* | before 1.0.2.46 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:mr90:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:* | before 1.1.8.142 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:ms70_firmware:*:*:*:*:*:*:*:* | before 1.0.4.48 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:ms70:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
- cpe:2.3:o:netgear:rax41_firmware:*:*:*:*:*:*:*:* Versions before 1.1.6.36 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax41:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax41v2_firmware:*:*:*:*:*:*:*:* Versions before 1.1.6.36 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax41v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax42_firmware:*:*:*:*:*:*:*:* Versions before 1.1.6.36 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax42:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax42v2_firmware:*:*:*:*:*:*:*:* Versions before 1.1.6.36 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax42v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:* Versions before 1.1.6.36 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax43v2_firmware:*:*:*:*:*:*:*:* Versions before 1.1.6.36 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax43v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:* Versions before 1.0.17.142 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax49s_firmware:*:*:*:*:*:*:*:* Versions before 1.1.6.36 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax49s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:* Versions before 1.1.6.36 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax50v2_firmware:*:*:*:*:*:*:*:* Versions before 1.1.6.36 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax50v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax54s_firmware:*:*:*:*:*:*:*:* Versions before 1.1.6.36 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax54s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax54sv2_firmware:*:*:*:*:*:*:*:* Versions before 1.1.6.36 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax54sv2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax80_firmware:*:*:*:*:*:*:*:* Versions before 1.0.11.148 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax80:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:raxe500_firmware:*:*:*:*:*:*:*:* Versions before 1.2.14.110 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:raxe500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rs700_firmware:*:*:*:*:*:*:*:* Versions before 1.0.9.6 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rs700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:xr1000_firmware:*:*:*:*:*:*:*:* Versions before 1.1.0.22 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:xr1000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:xr1000v2_firmware:*:*:*:*:*:*:*:* Versions before 1.1.0.22 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:xr1000v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:* Versions before 1.1.8.142 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:mr70_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.48 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:mr70:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:mr90_firmware:*:*:*:*:*:*:*:* Versions before 1.0.2.46 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:mr90:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:* Versions before 1.1.8.142 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:ms70_firmware:*:*:*:*:*:*:*:* Versions before 1.0.4.48 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:ms70:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
Remediation
- Fix · CNA MR60 (NETGEAR) Fixed in V1.1.8.142
- Fix · CNA MR70 (NETGEAR) Fixed in V1.0.4.48
- Fix · CNA MR90 (NETGEAR) Fixed in V1.0.2.46
- Fix · CNA MS60 (NETGEAR) Fixed in V1.1.8.142
- Fix · CNA MS70 (NETGEAR) Fixed in V1.0.4.48
- Fix · CNA MS90 (NETGEAR) Fixed in V1.0.2.46
- Fix · CNA RAX20 (NETGEAR) Fixed in V1.0.17.142
- Fix · CNA RAX200 (NETGEAR) Fixed in V1.0.11.148
- Fix · CNA RAX35 (NETGEAR) Fixed in V1.0.17.142
- Fix · CNA RAX35v2 (NETGEAR) Fixed in V1.0.17.142
- Fix · CNA RAX41 (NETGEAR) Fixed in V1.1.6.36
- Fix · CNA RAX41v2 (NETGEAR) Fixed in V1.1.6.36
- Fix · CNA RAX42 (NETGEAR) Fixed in V1.1.6.36
- Fix · CNA RAX42v2 (NETGEAR) Fixed in V1.1.6.36
- Fix · CNA RAX43 (NETGEAR) Fixed in V1.1.6.36
- Fix · CNA RAX43v2 (NETGEAR) Fixed in V1.1.6.36
- Fix · CNA RAX45 (NETGEAR) Fixed in V1.0.17.142
- Fix · CNA RAX49S (NETGEAR) Fixed in V1.1.6.36
- Fix · CNA RAX50 (NETGEAR) Fixed in V1.1.6.36
- Fix · CNA RAX50v2 (NETGEAR) Fixed in V1.1.6.36
- Fix · CNA RAX54S (NETGEAR) Fixed in V1.1.6.36
- Fix · CNA RAX54Sv2 (NETGEAR) Fixed in V1.1.6.36
- Fix · CNA RAX80 (NETGEAR) Fixed in V1.0.11.148
- Fix · CNA RAXE500 (NETGEAR) Fixed in V1.2.14.110
- Fix · CNA RS700 (NETGEAR) Fixed in V1.0.9.6
- Fix · CNA XR1000 (NETGEAR) Fixed in V1.1.0.22
- Fix · CNA XR1000v2 (NETGEAR) Fixed in V1.1.0.22
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
NETGEAR MR60, MR70 and 22 more products — kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advis…
8 records Highest priority Priority LOW 8 LOW
Other records, highest priority first
- TI-2026-10197 Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routersPriority LOW 29
- TI-2026-10137 Insufficient input validation in certain NETGEAR Nighthawk routers allows administrators to tamper with the device.Priority LOW 20
- TI-2026-10136 Some NETGEAR Nighthawk devices allow administrators to tamper with the devicePriority LOW 20
Timeline
- 2026-10-02 Threatist record created from CVE-2026-11739
- 2026-10-03 Alias added: GHSA-g2h4-h77j-p83h
References
Patch 26
- https://www.netgear.com/support/product/mr60/
- https://www.netgear.com/support/product/mr70/
- https://www.netgear.com/support/product/ms90/
- https://www.netgear.com/support/product/mr90/
- https://www.netgear.com/support/product/rax20/
- https://www.netgear.com/support/product/rax35/
- https://www.netgear.com/support/product/rax200/
- https://www.netgear.com/support/product/ms60/
- https://www.netgear.com/support/product/rax41/
- https://www.netgear.com/support/product/ms70/
- https://www.netgear.com/support/product/rax41v2/
- https://www.netgear.com/support/product/rax35v2/
- https://www.netgear.com/support/product/rax42/
- https://www.netgear.com/support/product/rax42v2/
- https://www.netgear.com/support/product/rax43/
- https://www.netgear.com/support/product/rax49s/
- https://www.netgear.com/support/product/rax50/
- https://www.netgear.com/support/product/rax43v2/
- https://www.netgear.com/support/product/rax50v2/
- https://www.netgear.com/support/product/rax45/
- https://www.netgear.com/support/product/raxe500/
- https://www.netgear.com/support/product/rax80/
- https://www.netgear.com/support/product/xr1000/
- https://www.netgear.com/support/product/rs700/
- https://www.netgear.com/support/product/xr1000v2/
- https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory
More NETGEAR Mr60 Firmware vulnerabilities
- TI-2023-18149 Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote… CVSS 3.1CRITICAL 9.8
- TI-2022-23936 NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer… CVSS 3.1CRITICAL 9.8
- TI-2021-20709 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1CRITICAL 9.8
- TI-2021-20699 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1CRITICAL 9.8
- TI-2021-20708 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1CRITICAL 9.8
- TI-2021-20707 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1CRITICAL 9.8
Sources
- CVE-2026-11739 · CVE Program
- CVE-2026-11739 · NVD
- FIRST EPSS
- GHSA-g2h4-h77j-p83h · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences