CVE-2026-11739
No fix known EPSS 3%CVSS 4.9
A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.
Products: NETGEAR MR60, NETGEAR MR70, NETGEAR MR90, NETGEAR MS60, NETGEAR MS70, NETGEAR MS90, NETGEAR RAX20, NETGEAR RAX200, NETGEAR RAX35, NETGEAR RAX35v2, NETGEAR RAX41, NETGEAR RAX41v2, NETGEAR RAX42, NETGEAR RAX42v2, NETGEAR RAX43, NETGEAR RAX43v2, NETGEAR RAX45, NETGEAR RAX49S, NETGEAR RAX50, NETGEAR RAX50v2, NETGEAR RAX54S, NETGEAR RAX54Sv2, NETGEAR RAX80, NETGEAR RAXE500, NETGEAR RS700, NETGEAR XR1000, NETGEAR XR1000v2