CVE-2026-11814
A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.
Weakness
A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.
Affected products
- netgear be9300_firmware
- netgear be9300
- netgear mr60_firmware
- netgear mr60
- netgear ms60_firmware
- netgear ms60
- netgear r6700ax_firmware
- netgear r6700ax
References
- https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory
- https://www.netgear.com/support/product/be9300/
- https://www.netgear.com/support/product/mr60/
- https://www.netgear.com/support/product/ms60/
- https://www.netgear.com/support/product/r6700ax/
- https://www.netgear.com/support/product/rax10/
Find the bug before an attacker does.
Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.