CVE-2026-11739

A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:netgear:ms90_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ms90:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:netgear:rax200_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax200:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:netgear:rax35_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax35:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:netgear:rax35v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax35v2:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:netgear:rax41_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax41:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:netgear:rax41v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax41v2:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:netgear:rax42_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax42:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:netgear:rax42v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax42v2:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:netgear:rax43v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax43v2:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:netgear:rax49s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax49s:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:netgear:rax50v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax50v2:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:netgear:rax54s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax54s:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:netgear:rax54sv2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax54sv2:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:netgear:rax80_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax80:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:netgear:raxe500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:raxe500:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:netgear:rs700_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rs700:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:netgear:xr1000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:xr1000:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:netgear:xr1000v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:xr1000v2:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:netgear:mr70_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:mr70:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:netgear:mr90_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:mr90:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:netgear:ms70_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ms70:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2026-08-11 16:17

Updated : 2026-09-09 02:59


NVD link : CVE-2026-11739

Mitre link : CVE-2026-11739

CVE.ORG link : CVE-2026-11739


JSON object : View

Products Affected

netgear

  • ms70_firmware
  • rax54s_firmware
  • rax42_firmware
  • xr1000v2
  • rax43v2
  • rax41_firmware
  • rax43v2_firmware
  • rax50v2_firmware
  • raxe500_firmware
  • rax43
  • mr70
  • mr60
  • ms60_firmware
  • rax200_firmware
  • ms60
  • rax42v2_firmware
  • ms70
  • rax54sv2_firmware
  • rax50
  • rax45
  • rax35_firmware
  • mr90
  • rax35v2_firmware
  • rax49s
  • rax35v2
  • rax41v2_firmware
  • rax41v2
  • rax43_firmware
  • rax35
  • rax54sv2
  • rax200
  • rax42v2
  • rs700
  • rax42
  • rax49s_firmware
  • rax50v2
  • mr90_firmware
  • raxe500
  • rax80_firmware
  • xr1000
  • xr1000v2_firmware
  • rs700_firmware
  • rax80
  • rax41
  • mr70_firmware
  • rax45_firmware
  • xr1000_firmware
  • ms90_firmware
  • rax54s
  • rax50_firmware
  • mr60_firmware
  • ms90
  • rax20
  • rax20_firmware
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')