Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Attack requirements
- Present
- Impact type
- Spoofing, Code execution
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-295 and CWE-77.
Summary
A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| NETGEAR | BE9300 | before V1.0.1.84 | V1.0.1.84 | Patch available | CNA |
| NETGEAR | MR60 | before V1.1.8.142 | V1.1.8.142 | Patch available | CNA |
| NETGEAR | MS60 | before V1.1.8.142 | V1.1.8.142 | Patch available | CNA |
| NETGEAR | R6700AX | before V1.0.18.164 | V1.0.18.164 | Patch available | CNA |
| NETGEAR | RAX10 | before V1.0.5.50 | V1.0.5.50 | Patch available | CNA |
| NETGEAR | RAX120 | before V1.2.10.56 | V1.2.10.56 | Patch available | CNA |
| NETGEAR | RAX120v2 | before V1.2.10.56 | V1.2.10.56 | Patch available | CNA |
| NETGEAR | RAX20 | before V1.0.17.142 | V1.0.17.142 | Patch available | CNA |
| NETGEAR | RAX28 | before V1.0.14.108 | V1.0.14.108 | Patch available | CNA |
| NETGEAR | RAX29 | before V1.0.14.108 | V1.0.14.108 | Patch available | CNA |
| NETGEAR | RAX30 | before V1.0.14.108 | V1.0.14.108 | Patch available | CNA |
| NETGEAR | RAX36S | before V1.0.5.50 | V1.0.5.50 | Patch available | CNA |
| NETGEAR | RAX43 | before V1.0.17.142 | V1.0.17.142 | Patch available | CNA |
| NETGEAR | RAX45 | before V1.0.17.142 | V1.0.17.142 | Patch available | CNA |
| NETGEAR | RAX50 | before V1.0.17.142 | V1.0.17.142 | Patch available | CNA |
| NETGEAR | RAX70 | before V1.0.19.172 | V1.0.19.172 | Patch available | CNA |
| NETGEAR | RBR760 | before V6.3.8.11 | V6.3.8.11 | Patch available | CNA |
| NETGEAR | RBS760 | before V6.3.8.11 | V6.3.8.11 | Patch available | CNA |
| NETGEAR | RS100 | before V1.0.1.80 | V1.0.1.80 | Patch available | CNA |
| NETGEAR | RS200 | before V1.0.1.90 | V1.0.1.90 | Patch available | CNA |
| NETGEAR | RS280 | before V1.0.1.90 | V1.0.1.90 | Patch available | CNA |
| NETGEAR | RS300 | before V1.0.1.90 | V1.0.1.90 | Patch available | CNA |
| NETGEAR | RS500 | before V1.0.1.90 | V1.0.1.90 | Patch available | CNA |
| NETGEAR | RS600 | before V1.0.1.90 | V1.0.1.90 | Patch available | CNA |
| NETGEAR | RS70 | before V1.0.1.80 | V1.0.1.80 | Patch available | CNA |
| NETGEAR | RS90 | before V1.0.1.80 | V1.0.1.80 | Patch available | CNA |
- BE9300 VendorNETGEAR Affected before V1.0.1.84 Fixed in V1.0.1.84 Patch available CNA
- MR60 VendorNETGEAR Affected before V1.1.8.142 Fixed in V1.1.8.142 Patch available CNA
- MS60 VendorNETGEAR Affected before V1.1.8.142 Fixed in V1.1.8.142 Patch available CNA
- R6700AX VendorNETGEAR Affected before V1.0.18.164 Fixed in V1.0.18.164 Patch available CNA
- RAX10 VendorNETGEAR Affected before V1.0.5.50 Fixed in V1.0.5.50 Patch available CNA
- RAX120 VendorNETGEAR Affected before V1.2.10.56 Fixed in V1.2.10.56 Patch available CNA
- RAX120v2 VendorNETGEAR Affected before V1.2.10.56 Fixed in V1.2.10.56 Patch available CNA
- RAX20 VendorNETGEAR Affected before V1.0.17.142 Fixed in V1.0.17.142 Patch available CNA
- RAX28 VendorNETGEAR Affected before V1.0.14.108 Fixed in V1.0.14.108 Patch available CNA
- RAX29 VendorNETGEAR Affected before V1.0.14.108 Fixed in V1.0.14.108 Patch available CNA
- RAX30 VendorNETGEAR Affected before V1.0.14.108 Fixed in V1.0.14.108 Patch available CNA
- RAX36S VendorNETGEAR Affected before V1.0.5.50 Fixed in V1.0.5.50 Patch available CNA
- RAX43 VendorNETGEAR Affected before V1.0.17.142 Fixed in V1.0.17.142 Patch available CNA
- RAX45 VendorNETGEAR Affected before V1.0.17.142 Fixed in V1.0.17.142 Patch available CNA
- RAX50 VendorNETGEAR Affected before V1.0.17.142 Fixed in V1.0.17.142 Patch available CNA
- RAX70 VendorNETGEAR Affected before V1.0.19.172 Fixed in V1.0.19.172 Patch available CNA
- RBR760 VendorNETGEAR Affected before V6.3.8.11 Fixed in V6.3.8.11 Patch available CNA
- RBS760 VendorNETGEAR Affected before V6.3.8.11 Fixed in V6.3.8.11 Patch available CNA
- RS100 VendorNETGEAR Affected before V1.0.1.80 Fixed in V1.0.1.80 Patch available CNA
- RS200 VendorNETGEAR Affected before V1.0.1.90 Fixed in V1.0.1.90 Patch available CNA
- RS280 VendorNETGEAR Affected before V1.0.1.90 Fixed in V1.0.1.90 Patch available CNA
- RS300 VendorNETGEAR Affected before V1.0.1.90 Fixed in V1.0.1.90 Patch available CNA
- RS500 VendorNETGEAR Affected before V1.0.1.90 Fixed in V1.0.1.90 Patch available CNA
- RS600 VendorNETGEAR Affected before V1.0.1.90 Fixed in V1.0.1.90 Patch available CNA
- RS70 VendorNETGEAR Affected before V1.0.1.80 Fixed in V1.0.1.80 Patch available CNA
- RS90 VendorNETGEAR Affected before V1.0.1.80 Fixed in V1.0.1.80 Patch available CNA
CPE configurations NVD · 52
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:netgear:be9300_firmware:*:*:*:*:*:*:*:* | before 1.0.1.84 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:be9300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:* | before 1.1.8.142 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:* | before 1.1.8.142 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:r6700ax_firmware:*:*:*:*:*:*:*:* | before 1.0.18.164 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:r6700ax:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax10_firmware:*:*:*:*:*:*:*:* | before 1.0.5.50 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
- cpe:2.3:o:netgear:be9300_firmware:*:*:*:*:*:*:*:* Versions before 1.0.1.84 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:be9300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:* Versions before 1.1.8.142 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:* Versions before 1.1.8.142 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:r6700ax_firmware:*:*:*:*:*:*:*:* Versions before 1.0.18.164 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:r6700ax:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax10_firmware:*:*:*:*:*:*:*:* Versions before 1.0.5.50 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
Show 42 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:netgear:rax120_firmware:*:*:*:*:*:*:*:* | before 1.2.10.56 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax120:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax120v2_firmware:*:*:*:*:*:*:*:* | before 1.2.10.56 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax120v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:* | before 1.0.17.142 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax28_firmware:*:*:*:*:*:*:*:* | before 1.0.14.108 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax28:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax29_firmware:*:*:*:*:*:*:*:* | before 1.0.14.108 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax29:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax30_firmware:*:*:*:*:*:*:*:* | before 1.0.14.108 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax30:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax36s_firmware:*:*:*:*:*:*:*:* | before 1.0.5.50 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax36s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:* | before 1.0.17.142 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:* | before 1.0.17.142 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:* | before 1.0.17.142 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rax70_firmware:*:*:*:*:*:*:*:* | before 1.0.19.172 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rax70:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbr760_firmware:*:*:*:*:*:*:*:* | before 6.3.8.11 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbr760:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbs760_firmware:*:*:*:*:*:*:*:* | before 6.3.8.11 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbs760:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rs100_firmware:*:*:*:*:*:*:*:* | before 1.0.1.80 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rs100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rs200_firmware:*:*:*:*:*:*:*:* | before 1.0.1.90 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rs200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rs280_firmware:*:*:*:*:*:*:*:* | before 1.0.1.90 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rs280:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rs300_firmware:*:*:*:*:*:*:*:* | before 1.0.1.90 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rs300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rs500_firmware:*:*:*:*:*:*:*:* | before 1.0.1.90 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rs500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rs600_firmware:*:*:*:*:*:*:*:* | before 1.0.1.90 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rs600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rs70_firmware:*:*:*:*:*:*:*:* | before 1.0.1.80 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rs70:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rs90_firmware:*:*:*:*:*:*:*:* | before 1.0.1.80 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rs90:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
- cpe:2.3:o:netgear:rax120_firmware:*:*:*:*:*:*:*:* Versions before 1.2.10.56 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax120:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax120v2_firmware:*:*:*:*:*:*:*:* Versions before 1.2.10.56 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax120v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:* Versions before 1.0.17.142 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax28_firmware:*:*:*:*:*:*:*:* Versions before 1.0.14.108 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax28:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax29_firmware:*:*:*:*:*:*:*:* Versions before 1.0.14.108 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax29:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax30_firmware:*:*:*:*:*:*:*:* Versions before 1.0.14.108 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax30:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax36s_firmware:*:*:*:*:*:*:*:* Versions before 1.0.5.50 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax36s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:* Versions before 1.0.17.142 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:* Versions before 1.0.17.142 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:* Versions before 1.0.17.142 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rax70_firmware:*:*:*:*:*:*:*:* Versions before 1.0.19.172 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rax70:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbr760_firmware:*:*:*:*:*:*:*:* Versions before 6.3.8.11 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbr760:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbs760_firmware:*:*:*:*:*:*:*:* Versions before 6.3.8.11 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbs760:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rs100_firmware:*:*:*:*:*:*:*:* Versions before 1.0.1.80 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rs100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rs200_firmware:*:*:*:*:*:*:*:* Versions before 1.0.1.90 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rs200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rs280_firmware:*:*:*:*:*:*:*:* Versions before 1.0.1.90 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rs280:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rs300_firmware:*:*:*:*:*:*:*:* Versions before 1.0.1.90 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rs300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rs500_firmware:*:*:*:*:*:*:*:* Versions before 1.0.1.90 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rs500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rs600_firmware:*:*:*:*:*:*:*:* Versions before 1.0.1.90 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rs600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rs70_firmware:*:*:*:*:*:*:*:* Versions before 1.0.1.80 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rs70:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rs90_firmware:*:*:*:*:*:*:*:* Versions before 1.0.1.80 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rs90:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
Remediation
- Fix · CNA BE9300 (NETGEAR) Fixed in V1.0.1.84
- Fix · CNA MR60 (NETGEAR) Fixed in V1.1.8.142
- Fix · CNA MS60 (NETGEAR) Fixed in V1.1.8.142
- Fix · CNA R6700AX (NETGEAR) Fixed in V1.0.18.164
- Fix · CNA RAX10 (NETGEAR) Fixed in V1.0.5.50
- Fix · CNA RAX120 (NETGEAR) Fixed in V1.2.10.56
- Fix · CNA RAX120v2 (NETGEAR) Fixed in V1.2.10.56
- Fix · CNA RAX20 (NETGEAR) Fixed in V1.0.17.142
- Fix · CNA RAX28 (NETGEAR) Fixed in V1.0.14.108
- Fix · CNA RAX29 (NETGEAR) Fixed in V1.0.14.108
- Fix · CNA RAX30 (NETGEAR) Fixed in V1.0.14.108
- Fix · CNA RAX36S (NETGEAR) Fixed in V1.0.5.50
- Fix · CNA RAX43 (NETGEAR) Fixed in V1.0.17.142
- Fix · CNA RAX45 (NETGEAR) Fixed in V1.0.17.142
- Fix · CNA RAX50 (NETGEAR) Fixed in V1.0.17.142
- Fix · CNA RAX70 (NETGEAR) Fixed in V1.0.19.172
- Fix · CNA RBR760 (NETGEAR) Fixed in V6.3.8.11
- Fix · CNA RBS760 (NETGEAR) Fixed in V6.3.8.11
- Fix · CNA RS100 (NETGEAR) Fixed in V1.0.1.80
- Fix · CNA RS200 (NETGEAR) Fixed in V1.0.1.90
- Fix · CNA RS280 (NETGEAR) Fixed in V1.0.1.90
- Fix · CNA RS300 (NETGEAR) Fixed in V1.0.1.90
- Fix · CNA RS500 (NETGEAR) Fixed in V1.0.1.90
- Fix · CNA RS600 (NETGEAR) Fixed in V1.0.1.90
- Fix · CNA RS70 (NETGEAR) Fixed in V1.0.1.80
- Fix · CNA RS90 (NETGEAR) Fixed in V1.0.1.80
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
NETGEAR MR60, MS60 and 4 more products — kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advis…
7 records Highest priority Priority LOW 7 LOW
Other records, highest priority first
- TI-2026-10138 Command injection vulnerability in some NETGEAR Nighthawk devicesPriority LOW 29
- TI-2026-10136 Some NETGEAR Nighthawk devices allow administrators to tamper with the devicePriority LOW 20
- TI-2026-10135 Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routersPriority LOW 12
Timeline
- 2026-10-02 Threatist record created from CVE-2026-11814
- 2026-10-03 Alias added: GHSA-7w3c-j7rc-7ffv
References
Patch 27
- https://www.netgear.com/support/product/mr60/
- https://www.netgear.com/support/product/be9300/
- https://www.netgear.com/support/product/ms60/
- https://www.netgear.com/support/product/r6700ax/
- https://www.netgear.com/support/product/rax10/
- https://www.netgear.com/support/product/rax120/
- https://www.netgear.com/support/product/rax120v2/
- https://www.netgear.com/support/product/rax20/
- https://www.netgear.com/support/product/rax29/
- https://www.netgear.com/support/product/rax28/
- https://www.netgear.com/support/product/rax30/
- https://www.netgear.com/support/product/rax36s/
- https://www.netgear.com/support/product/rax45/
- https://www.netgear.com/support/product/rax43/
- https://www.netgear.com/support/product/rax50/
- https://www.netgear.com/support/product/rax70/
- https://www.netgear.com/support/product/rbr760/
- https://www.netgear.com/support/product/rs280/
- https://www.netgear.com/support/product/rbs760/
- https://www.netgear.com/support/product/rs200/
- https://www.netgear.com/support/product/rs300/
- https://www.netgear.com/support/product/rs100/
- https://www.netgear.com/support/product/rs70/
- https://www.netgear.com/support/product/rs600/
- https://www.netgear.com/support/product/rs500/
- https://www.netgear.com/support/product/rs90/
- https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory
More NETGEAR Be9300 Firmware vulnerabilities
- TI-2026-10137 Insufficient input validation in certain NETGEAR Nighthawk routers allows administrators to tamper with the device. CVSS 4.0MEDIUM 4.3
Sources
- CVE-2026-11814 · CVE Program
- CVE-2026-11814 · NVD
- FIRST EPSS
- GHSA-7w3c-j7rc-7ffv · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences