Log in Start free

Vulnerability · Published Aug 11, 2026 · Assigned by NETGEAR

CVE-2026-11814Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers

Medium 4.9

In plain English

A medium-severity improper certificate validation in BE9300 from NETGEAR. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.2% (higher than 82% of all known vulnerabilities).

Severity (CVSS 4.0)4.9Medium
Exploit odds (30 days)2.2%top 17.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.

Affected products (as reported)

VendorProductVersions
NETGEAR BE9300 0 – before V1.0.1.84
NETGEAR MR60 0 – before V1.1.8.142
NETGEAR MS60 0 – before V1.1.8.142
NETGEAR R6700AX 0 – before V1.0.18.164
NETGEAR RAX10 0 – before V1.0.5.50
NETGEAR RAX120 0 – before V1.2.10.56
NETGEAR RAX120v2 0 – before V1.2.10.56
NETGEAR RAX20 0 – before V1.0.17.142
NETGEAR RAX28 0 – before V1.0.14.108
NETGEAR RAX29 0 – before V1.0.14.108
NETGEAR RAX30 0 – before V1.0.14.108
NETGEAR RAX36S 0 – before V1.0.5.50
NETGEAR RAX43 0 – before V1.0.17.142
NETGEAR RAX45 0 – before V1.0.17.142
NETGEAR RAX50 0 – before V1.0.17.142
NETGEAR RAX70 0 – before V1.0.19.172
NETGEAR RBR760 0 – before V6.3.8.11
NETGEAR RBS760 0 – before V6.3.8.11
NETGEAR RS100 0 – before V1.0.1.80
NETGEAR RS200 0 – before V1.0.1.90
NETGEAR RS280 0 – before V1.0.1.90
NETGEAR RS300 0 – before V1.0.1.90
NETGEAR RS500 0 – before V1.0.1.90
NETGEAR RS600 0 – before V1.0.1.90
NETGEAR RS70 0 – before V1.0.1.80
NETGEAR RS90 0 – before V1.0.1.80

Weakness: CWE-295 · Vector: CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:L/U:Amber

References