ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2026-11738

—
CVSS 4.0
4.3 medium
EPSS
<1%p19
Published
()
Modified
Description

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.

Vendors
netgear
Products
be9300 firmware, mr60 firmware, ms60 firmware, r6700ax firmware, rax10 firmware, rax120 firmware, rax120v2 firmware, rax20 firmware, rax28 firmware, rax29 firmware, rax30 firmware, rax36s firmware
Weakness
CWE-20
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber
NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

No ingested article mentions this CVE yet.