CVE-2026-11814

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.

• netgear be9300 firmware (< 1.0.1.84) • netgear mr60 firmware (< 1.1.8.142) • netgear ms60 firmware (< 1.1.8.142) • netgear r6700ax firmware (< 1.0.18.164) • netgear rax10 firmware (< 1.0.5.50) • netgear rax120 firmware (< 1.2.10.56) • netgear rax120v2 firmware (< 1.2.10.56) • netgear rax20 firmware (< 1.0.17.142) • netgear rax28 firmware (< 1.0.14.108) • netgear rax29 firmware (< 1.0.14.108) • netgear rax30 firmware (< 1.0.14.108) • netgear rax36s firmware (< 1.0.5.50) • netgear rax43 firmware (< 1.0.17.142) • netgear rax45 firmware (< 1.0.17.142) • netgear rax50 firmware (< 1.0.17.142) • netgear rax70 firmware (< 1.0.19.172) • netgear rbr760 firmware (< 6.3.8.11) • netgear rbs760 firmware (< 6.3.8.11) • netgear rs100 firmware (< 1.0.1.80) • netgear rs200 firmware (< 1.0.1.90) • netgear rs280 firmware (< 1.0.1.90) • netgear rs300 firmware (< 1.0.1.90) • netgear rs500 firmware (< 1.0.1.90) • netgear rs600 firmware (< 1.0.1.90) • netgear rs70 firmware (< 1.0.1.80) • netgear rs90 firmware (< 1.0.1.80)