A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.
History

Wed, 09 Sep 2026 03:15:00 +0000

Type Values Removed Values Added
First Time appeared Netgear
Netgear be9300
Netgear be9300 Firmware
Netgear mr60
Netgear mr60 Firmware
Netgear ms60
Netgear ms60 Firmware
Netgear r6700ax
Netgear r6700ax Firmware
Netgear rax10
Netgear rax10 Firmware
Netgear rax120
Netgear rax120 Firmware
Netgear rax120v2
Netgear rax120v2 Firmware
Netgear rax20
Netgear rax20 Firmware
Netgear rax28
Netgear rax28 Firmware
Netgear rax29
Netgear rax29 Firmware
Netgear rax30
Netgear rax30 Firmware
Netgear rax36s
Netgear rax36s Firmware
Netgear rax43
Netgear rax43 Firmware
Netgear rax45
Netgear rax45 Firmware
Netgear rax50
Netgear rax50 Firmware
Netgear rax70
Netgear rax70 Firmware
Netgear rbr760
Netgear rbr760 Firmware
Netgear rbs760
Netgear rbs760 Firmware
Netgear rs100
Netgear rs100 Firmware
Netgear rs200
Netgear rs200 Firmware
Netgear rs280
Netgear rs280 Firmware
Netgear rs300
Netgear rs300 Firmware
Netgear rs500
Netgear rs500 Firmware
Netgear rs600
Netgear rs600 Firmware
Netgear rs70
Netgear rs70 Firmware
Netgear rs90
Netgear rs90 Firmware
Weaknesses CWE-77
CPEs cpe:2.3:h:netgear:be9300:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6700ax:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax10:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax120:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax120v2:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax28:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax29:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax30:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax36s:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax70:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr760:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs760:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rs100:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rs200:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rs280:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rs300:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rs500:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rs600:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rs70:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rs90:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:be9300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r6700ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax10_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax120_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax120v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax28_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax29_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax30_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax36s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax70_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbr760_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbs760_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rs100_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rs200_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rs280_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rs300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rs500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rs600_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rs70_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rs90_firmware:*:*:*:*:*:*:*:*
Vendors & Products Netgear
Netgear be9300
Netgear be9300 Firmware
Netgear mr60
Netgear mr60 Firmware
Netgear ms60
Netgear ms60 Firmware
Netgear r6700ax
Netgear r6700ax Firmware
Netgear rax10
Netgear rax10 Firmware
Netgear rax120
Netgear rax120 Firmware
Netgear rax120v2
Netgear rax120v2 Firmware
Netgear rax20
Netgear rax20 Firmware
Netgear rax28
Netgear rax28 Firmware
Netgear rax29
Netgear rax29 Firmware
Netgear rax30
Netgear rax30 Firmware
Netgear rax36s
Netgear rax36s Firmware
Netgear rax43
Netgear rax43 Firmware
Netgear rax45
Netgear rax45 Firmware
Netgear rax50
Netgear rax50 Firmware
Netgear rax70
Netgear rax70 Firmware
Netgear rbr760
Netgear rbr760 Firmware
Netgear rbs760
Netgear rbs760 Firmware
Netgear rs100
Netgear rs100 Firmware
Netgear rs200
Netgear rs200 Firmware
Netgear rs280
Netgear rs280 Firmware
Netgear rs300
Netgear rs300 Firmware
Netgear rs500
Netgear rs500 Firmware
Netgear rs600
Netgear rs600 Firmware
Netgear rs70
Netgear rs70 Firmware
Netgear rs90
Netgear rs90 Firmware
Metrics cvssV3_1

{'score': 6.8, 'vector': 'CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'}


Wed, 12 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 12 Aug 2026 08:15:00 +0000


Tue, 11 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
Description A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.
Title Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers
Weaknesses CWE-295
References
Metrics cvssV4_0

{'score': 4.9, 'vector': 'CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:L/U:Amber'}


cve-icon MITRE

Status: PUBLISHED

Assigner: NETGEAR

Published: 2026-08-11T15:06:08.351Z

Updated: 2026-08-12T14:42:32.098Z

Reserved: 2026-06-09T15:57:56.506Z

Link: CVE-2026-11814

cve-icon Vulnrichment

Updated: 2026-08-12T14:42:23.990Z

cve-icon NVD

Status : Analyzed

Published: 2026-08-11T16:17:28.540

Modified: 2026-09-09T03:00:03.993

Link: CVE-2026-11814

cve-icon Redhat

No data.