Vulnerability Description
A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netgear | R7000 Firmware | - |
| Netgear | R7000 | - |
| Netgear | Rax20 Firmware | - |
| Netgear | Rax20 | - |
| Netgear | Rax35V2 Firmware | < 1.0.16.132 |
| Netgear | Rax35V2 | - |
| Netgear | Rax41 Firmware | - |
| Netgear | Rax41 | - |
| Netgear | Rax41V2 Firmware | < 1.1.4.28 |
| Netgear | Rax41V2 | - |
| Netgear | Rax42 Firmware | - |
| Netgear | Rax42 | - |
| Netgear | Rax42V2 Firmware | < 1.1.4.28 |
| Netgear | Rax42V2 | - |
| Netgear | Rax43 Firmware | < 1.0.16.132 |
| Netgear | Rax43 | - |
| Netgear | Rax43V2 Firmware | < 1.1.4.28 |
| Netgear | Rax43V2 | - |
| Netgear | Rax45 Firmware | - |
| Netgear | Rax45 | - |
Related Weaknesses (CWE)
References
- https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-AdvisoryVendor Advisory
- https://www.netgear.com/support/product/r7000/Product
- https://www.netgear.com/support/product/rax20/Product
- https://www.netgear.com/support/product/rax35v2/Product
- https://www.netgear.com/support/product/rax41/Product
- https://www.netgear.com/support/product/rax41v2/Product
- https://www.netgear.com/support/product/rax42/Product
- https://www.netgear.com/support/product/rax42v2/Product
- https://www.netgear.com/support/product/rax43/Product
- https://www.netgear.com/support/product/rax43v2/Product
- https://www.netgear.com/support/product/rax45/Product
- https://www.netgear.com/support/product/rax49s/Product
- https://www.netgear.com/support/product/rax50/Product
- https://www.netgear.com/support/product/rax50s/Product
- https://www.netgear.com/support/product/rax50v2/Product
FAQ
What is CVE-2026-11735?
CVE-2026-11735 is a vulnerability with a CVSS score of 4.9 (MEDIUM). A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.
How severe is CVE-2026-11735?
CVE-2026-11735 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-11735?
Check the references section above for vendor advisories and patch information. Affected products include: Netgear R7000 Firmware, Netgear R7000, Netgear Rax20 Firmware, Netgear Rax20, Netgear Rax35V2 Firmware.