CVE-2026-11814
No fix known EPSS 2%CVSS 4.9
A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.
Products: NETGEAR BE9300, NETGEAR MR60, NETGEAR MS60, NETGEAR R6700AX, NETGEAR RAX10, NETGEAR RAX120, NETGEAR RAX120v2, NETGEAR RAX20, NETGEAR RAX28, NETGEAR RAX29, NETGEAR RAX30, NETGEAR RAX36S, NETGEAR RAX43, NETGEAR RAX45, NETGEAR RAX50, NETGEAR RAX70, netgear rbr760, NETGEAR RBS760, NETGEAR RS100, NETGEAR RS200, NETGEAR RS280, NETGEAR RS300, NETGEAR RS500, NETGEAR RS600, NETGEAR RS70, NETGEAR RS90