CVE-2026-11734CWE-121

CVE-2026-11734

Low · published August 11, 2026

CVSS v3.1
2.7
EPSS
1%
Percentile
48.2
In the wild
Unconfirmed
What it is

A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00603 · 48.2th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-08-11T20:17Z
Affected products (15)
ProductVersionsFixed in
netgear/rax41_firmware< 1.1.6.361.1.6.36
netgear/rax41v2_firmware< 1.1.6.361.1.6.36
netgear/rax42_firmware< 1.1.6.361.1.6.36
netgear/mr70_firmware< 1.0.4.481.0.4.48
netgear/mr90_firmware< 1.0.2.461.0.2.46
netgear/ms70_firmware≤ 1.0.4.48—
netgear/ms90_firmware< 1.0.2.461.0.2.46
netgear/rax42v2_firmware< 1.1.6.361.1.6.36
netgear/rax43_firmware< 1.1.6.361.1.6.36
netgear/rax43v2_firmware< 1.1.6.361.1.6.36
netgear/rax49s_firmware< 1.1.6.361.1.6.36
netgear/rax50_firmware< 1.1.6.361.1.6.36
netgear/rax50v2_firmware< 1.1.6.361.1.6.36
netgear/rax54s_firmware< 1.1.6.361.1.6.36
netgear/rax54sv2_firmware< 1.1.6.361.1.6.36
References (14)
EPSS history
Timeline
  • 11 AUG 15:06Z
    Device administrator can interrupt the normal operation of some NETGEAR Nighthawk devices.
    cvelistv5