Log in Start free

Vulnerability · Published Aug 11, 2026 · Assigned by NETGEAR

CVE-2026-11735Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models

Low 1.9

In plain English

A low-severity stack buffer overflow in R7000 from NETGEAR. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).

Severity (CVSS 4.0)1.9Low
Exploit odds (30 days)0.8%top 44.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.

Affected products (as reported)

VendorProductVersions
NETGEAR R7000 0 – before *
NETGEAR RAX20 0 – before *
NETGEAR RAX35v2 0 – before V1.0.16.132
NETGEAR RAX41 0 – before *
NETGEAR RAX41v2 0 – before V1.1.4.28
NETGEAR RAX42 0 – before *
NETGEAR RAX42v2 0 – before V1.1.4.28
NETGEAR RAX43 0 – before V1.0.16.132
NETGEAR RAX43v2 0 – before V1.1.4.28
NETGEAR RAX45 0 – before *
NETGEAR RAX49S 0 – before V1.1.4.28
NETGEAR RAX50 0 – before V1.0.16.132
NETGEAR RAX50S 0 – before V1.0.16.132
NETGEAR RAX50v2 0 – before V1.1.4.28
NETGEAR RAX54Sv2 0 – before V1.1.4.28
NETGEAR RAX54v2 0 – before V1.1.4.28
NETGEAR RAXE450 0 – before *
NETGEAR RAXE500 0 – before V1.2.14.114
NETGEAR XR1000 0 – before V1.1.0.22
NETGEAR XR1000v2 0 – before V1.1.0.22

Weakness: CWE-121 · Vector: CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:Y/R:U/V:D/RE:L/U:Amber

References