InfoSec Signals™
Sign InStart Free
Back to CVE records
Medium 4.9Published Aug 11, 2026

CVE-2026-11814Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers

Updated under an hour ago ()

Does this affect you?

It affects NETGEAR BE9300 and 51 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.

CVSS
4.9 MEDIUM (v4.0, CNA)CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:L/U:Amber
Weakness (CWE)
CWE-295
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
NETGEAR
NVD analysis
Analyzed
Record last updated
Aug 12, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
NETGEAR BE9300
netgear:be9300 (from the name)
before V1.0.1.84
CNA record
NETGEAR MR60
netgear:mr60 (from the name)
before V1.1.8.142
CNA record
NETGEAR MS60
netgear:ms60 (from the name)
before V1.1.8.142
CNA record
NETGEAR R6700AX
netgear:r6700ax (from the name)
before V1.0.18.164
CNA record
NETGEAR RAX10
netgear:rax10 (from the name)
before V1.0.5.50
CNA record
NETGEAR RAX120
netgear:rax120 (from the name)
before V1.2.10.56
CNA record
NETGEAR RAX120v2
netgear:rax120v2 (from the name)
before V1.2.10.56
CNA record
NETGEAR RAX20
netgear:rax20 (from the name)
before V1.0.17.142
CNA record
NETGEAR RAX28
netgear:rax28 (from the name)
before V1.0.14.108
CNA record
NETGEAR RAX29
netgear:rax29 (from the name)
before V1.0.14.108
CNA record
NETGEAR RAX30
netgear:rax30 (from the name)
before V1.0.14.108
CNA record
NETGEAR RAX36S
netgear:rax36s (from the name)
before V1.0.5.50
CNA record
NETGEAR RAX43
netgear:rax43 (from the name)
before V1.0.17.142
CNA record
NETGEAR RAX45
netgear:rax45 (from the name)
before V1.0.17.142
CNA record
NETGEAR RAX50
netgear:rax50 (from the name)
before V1.0.17.142
CNA record
NETGEAR RAX70
netgear:rax70 (from the name)
before V1.0.19.172
CNA record
NETGEAR RBR760
netgear:rbr760 (from the name)
before V6.3.8.11
CNA record
NETGEAR RBS760
netgear:rbs760 (from the name)
before V6.3.8.11
CNA record
NETGEAR RS100
netgear:rs100 (from the name)
before V1.0.1.80
CNA record
NETGEAR RS200
netgear:rs200 (from the name)
before V1.0.1.90
CNA record
NETGEAR RS280
netgear:rs280 (from the name)
before V1.0.1.90
CNA record
NETGEAR RS300
netgear:rs300 (from the name)
before V1.0.1.90
CNA record
NETGEAR RS500
netgear:rs500 (from the name)
before V1.0.1.90
CNA record
NETGEAR RS600
netgear:rs600 (from the name)
before V1.0.1.90
CNA record
NETGEAR RS70
netgear:rs70 (from the name)
before V1.0.1.80
CNA record
NETGEAR RS90
netgear:rs90 (from the name)
before V1.0.1.80
CNA record
netgear be9300_firmware
netgear:be9300_firmware
before 1.0.1.84
NVD
netgear mr60_firmware
netgear:mr60_firmware
before 1.1.8.142
NVD
netgear ms60_firmware
netgear:ms60_firmware
before 1.1.8.142
NVD
netgear r6700ax_firmware
netgear:r6700ax_firmware
before 1.0.18.164
NVD
netgear rax10_firmware
netgear:rax10_firmware
before 1.0.5.50
NVD
netgear rax120_firmware
netgear:rax120_firmware
before 1.2.10.56
NVD
netgear rax120v2_firmware
netgear:rax120v2_firmware
before 1.2.10.56
NVD
netgear rax20_firmware
netgear:rax20_firmware
before 1.0.17.142
NVD
netgear rax28_firmware
netgear:rax28_firmware
before 1.0.14.108
NVD
netgear rax29_firmware
netgear:rax29_firmware
before 1.0.14.108
NVD
netgear rax30_firmware
netgear:rax30_firmware
before 1.0.14.108
NVD
netgear rax36s_firmware
netgear:rax36s_firmware
before 1.0.5.50
NVD
netgear rax43_firmware
netgear:rax43_firmware
before 1.0.17.142
NVD
netgear rax45_firmware
netgear:rax45_firmware
before 1.0.17.142
NVD
netgear rax50_firmware
netgear:rax50_firmware
before 1.0.17.142
NVD
netgear rax70_firmware
netgear:rax70_firmware
before 1.0.19.172
NVD
netgear rbr760_firmware
netgear:rbr760_firmware
before 6.3.8.11
NVD
netgear rbs760_firmware
netgear:rbs760_firmware
before 6.3.8.11
NVD
netgear rs100_firmware
netgear:rs100_firmware
before 1.0.1.80
NVD
netgear rs200_firmware
netgear:rs200_firmware
before 1.0.1.90
NVD
netgear rs280_firmware
netgear:rs280_firmware
before 1.0.1.90
NVD
netgear rs300_firmware
netgear:rs300_firmware
before 1.0.1.90
NVD
netgear rs500_firmware
netgear:rs500_firmware
before 1.0.1.90
NVD
netgear rs600_firmware
netgear:rs600_firmware
before 1.0.1.90
NVD
netgear rs70_firmware
netgear:rs70_firmware
before 1.0.1.80
NVD
netgear rs90_firmware
netgear:rs90_firmware
before 1.0.1.80
NVD

References

  • product, patch
  • product, patch
  • product, patch
  • product, patch
  • product, patch
  • product, patch
  • product, patch
  • product, patch
  • product, patch
  • product, patch
  • product, patch
  • product, patch
  • product, patch
  • product, patch
  • product, patch
  • product, patch
  • product, patch
  • product, patch
  • product, patch
  • product, patch
  • product, patch
  • product, patch
  • product, patch
  • product, patch
  • product, patch
  • vendor-advisory

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.