1. Home
  2. CVE Database
  3. CVE-2026-11737
MEDIUM · 4.5

CVE-2026-11737

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software a...

Vulnerability Description

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality.

CVSS Score

4.5

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
NetgearRax20 Firmware< 1.0.18.144
NetgearRax20-
NetgearRax41 Firmware< 1.1.6.36
NetgearRax41-
NetgearRax41V2 Firmware< 1.1.6.36
NetgearRax41V2-
NetgearRax42 Firmware< 1.1.6.36
NetgearRax42-
NetgearRax42V2 Firmware< 1.1.6.36
NetgearRax42V2-
NetgearRax43 Firmware< 1.1.6.36
NetgearRax43-
NetgearRax43V2 Firmware< 1.1.6.36
NetgearRax43V2-
NetgearRax45 Firmware< 1.0.17.142
NetgearRax45-
NetgearRax49S Firmware< 1.1.6.36
NetgearRax49S-
NetgearRax50 Firmware< 1.1.6.36
NetgearRax50-

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2026-11737?

CVE-2026-11737 is a vulnerability with a CVSS score of 4.5 (MEDIUM). Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software a...

How severe is CVE-2026-11737?

CVE-2026-11737 has been rated MEDIUM with a CVSS base score of 4.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-11737?

Check the references section above for vendor advisories and patch information. Affected products include: Netgear Rax20 Firmware, Netgear Rax20, Netgear Rax41 Firmware, Netgear Rax41, Netgear Rax41V2 Firmware.