Vulnerability Description
A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.
CVSS Score
2.7
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netgear | Mr70 Firmware | < 1.0.4.48 |
| Netgear | Mr70 | - |
| Netgear | Mr90 Firmware | < 1.0.2.46 |
| Netgear | Mr90 | - |
| Netgear | Ms70 Firmware | <= 1.0.4.48 |
| Netgear | Ms70 | - |
| Netgear | Ms90 Firmware | < 1.0.2.46 |
| Netgear | Ms90 | - |
| Netgear | Rax41 Firmware | < 1.1.6.36 |
| Netgear | Rax41 | - |
| Netgear | Rax41V2 Firmware | < 1.1.6.36 |
| Netgear | Rax41V2 | - |
| Netgear | Rax42 Firmware | < 1.1.6.36 |
| Netgear | Rax42 | - |
| Netgear | Rax42V2 Firmware | < 1.1.6.36 |
| Netgear | Rax42V2 | - |
| Netgear | Rax43 Firmware | < 1.1.6.36 |
| Netgear | Rax43 | - |
| Netgear | Rax43V2 Firmware | < 1.1.6.36 |
| Netgear | Rax43V2 | - |
Related Weaknesses (CWE)
References
- https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-AdvisoryVendor Advisory
- https://www.netgear.com/support/product/mr70/Product
- https://www.netgear.com/support/product/mr90/Product
- https://www.netgear.com/support/product/ms70/Product
- https://www.netgear.com/support/product/ms90/Product
- https://www.netgear.com/support/product/rax41/Product
- https://www.netgear.com/support/product/rax41v2/Product
- https://www.netgear.com/support/product/rax42/Product
- https://www.netgear.com/support/product/rax42v2/Product
- https://www.netgear.com/support/product/rax43/Product
- https://www.netgear.com/support/product/rax43v2/Product
- https://www.netgear.com/support/product/rax49s/Product
- https://www.netgear.com/support/product/rax50/Product
- https://www.netgear.com/support/product/rax50v2/Product
FAQ
What is CVE-2026-11734?
CVE-2026-11734 is a vulnerability with a CVSS score of 2.7 (LOW). A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.
How severe is CVE-2026-11734?
CVE-2026-11734 has been rated LOW with a CVSS base score of 2.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-11734?
Check the references section above for vendor advisories and patch information. Affected products include: Netgear Mr70 Firmware, Netgear Mr70, Netgear Mr90 Firmware, Netgear Mr90, Netgear Ms70 Firmware.