Log in Start free

Vulnerability · Published Aug 11, 2026 · Assigned by NETGEAR

CVE-2026-11736Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers

Low 1.9

In plain English

A low-severity improper input validation in RAX20 from NETGEAR. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).

Severity (CVSS 4.0)1.9Low
Exploit odds (30 days)0.8%top 44.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality.

Affected products (as reported)

VendorProductVersions
NETGEAR RAX20 0 – before *
NETGEAR RAX35v2 0 – before V1.0.16.132
NETGEAR RAX41 0 – before *
NETGEAR RAX41v2 0 – before V1.1.4.28
NETGEAR RAX42 0 – before *
NETGEAR RAX42v2 0 – before V1.1.4.28
NETGEAR RAX43 0 – before V1.0.16.132
NETGEAR RAX43v2 0 – before V1.1.4.28
NETGEAR RAX45 0 – before *
NETGEAR RAX49S 0 – before V1.1.4.28
NETGEAR RAX50 0 – before V1.0.16.132
NETGEAR RAX50S 0 – before *
NETGEAR RAX50v2 0 – before V1.1.4.28
NETGEAR RAX54Sv2 0 – before V1.1.4.28
NETGEAR RAX54v2 0 – before V1.1.4.28
NETGEAR RAXE450 0 – before *
NETGEAR RAXE500 0 – before V1.2.14.114
NETGEAR XR1000 0 – before V1.1.0.22
NETGEAR XR1000v2 0 – before V1.1.0.22

Weakness: CWE-20 · Vector: CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:L/U:Amber

References