CVE-2026-11739
A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.
Weakness
A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.
Affected products
- netgear ms90_firmware
- netgear ms90
- netgear rax20_firmware
- netgear rax20
- netgear rax200_firmware
- netgear rax200
- netgear rax35_firmware
- netgear rax35
References
Find the bug before an attacker does.
Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.