CVE-2026-11736CWE-20CWE-787

CVE-2026-11736

Medium · published August 11, 2026

CVSS v3.1
4.9
EPSS
1%
Percentile
42.6
In the wild
Unconfirmed
What it is

A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00509 · 42.6th percentile
Weaknesses
CWE-20 · Improper Input Validation; CWE-787 · Out-of-bounds Write
Published
2026-08-11T20:17Z
Affected products (19)
ProductVersionsFixed in
netgear/rax20_firmwareall versions—
netgear/rax35v2_firmware< 1.0.16.1321.0.16.132
netgear/rax41_firmwareall versions—
netgear/rax41v2_firmware< 1.1.4.281.1.4.28
netgear/rax42_firmwareall versions—
netgear/rax42v2_firmware< 1.1.4.281.1.4.28
netgear/rax43_firmware< 1.0.16.1321.0.16.132
netgear/rax43v2_firmware< 1.1.4.281.1.4.28
netgear/rax45_firmwareall versions—
netgear/rax49s_firmware< 1.1.4.281.1.4.28
netgear/rax50_firmware< 1.0.16.1321.0.16.132
netgear/rax50s_firmwareall versions—
netgear/rax50v2_firmware< 1.1.4.281.1.4.28
netgear/rax54sv2_firmware< 1.1.4.281.1.4.28
netgear/rax54v2_firmware< 1.1.4.281.1.4.28
netgear/raxe450_firmwareall versions—
netgear/raxe500_firmware< 1.2.14.1141.2.14.114
netgear/xr1000_firmware< 1.1.0.221.1.0.22
netgear/xr1000v2_firmware< 1.1.0.221.1.0.22
References (19)
https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax20/ · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax35v2/ · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax41/ · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax41v2/ · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax42/ · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax42v2/ · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax43/ · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax43v2/ · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax45/ · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax49s/ · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax50/ · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax50s/ · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax50v2/ · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/rax54sv2/ · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/raxe450/ · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/raxe500/ · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/xr1000/ · a2826606-91e7-4eb6-899e-8484bd4575d5https://www.netgear.com/support/product/xr1000v2/ · a2826606-91e7-4eb6-899e-8484bd4575d5
EPSS history
Timeline
  • 11 AUG 15:06Z
    Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers
    cvelistv5