{ "dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": { "cveId": "CVE-2026-11739", "assignerOrgId": "a2826606-91e7-4eb6-899e-8484bd4575d5", "state": "PUBLISHED", "assignerShortName": "NETGEAR", "dateReserved": "2026-06-09T02:46:48.152Z", "datePublished": "2026-08-11T15:06:14.908Z", "dateUpdated": "2026-08-12T07:44:33.040Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "a2826606-91e7-4eb6-899e-8484bd4575d5", "shortName": "NETGEAR", "dateUpdated": "2026-08-12T07:44:33.040Z" }, "title": "Command injection vulnerability in some NETGEAR Nighthawk devices", "datePublic": "2026-08-11T15:00:00.000Z", "problemTypes": [ { "descriptions": [ { "lang": "en", "cweId": "CWE-78", "description": "CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection')", "type": "CWE" } ] } ], "impacts": [ { "capecId": "CAPEC-88", "descriptions": [ { "lang": "en", "value": "CAPEC-88 OS Command Injection" } ] } ], "affected": [ { "vendor": "NETGEAR", "product": "MR60", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.1.8.142", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "MR70", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.4.48", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "MR90", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.2.46", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "MS60", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.1.8.142", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "MS70", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.4.48", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "MS90", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.2.46", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX20", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.17.142", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX200", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.11.148", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX35", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.17.142", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX35v2", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.17.142", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX41", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.1.6.36", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX41v2", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.1.6.36", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX42", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.1.6.36", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX42v2", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.1.6.36", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX43", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.1.6.36", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX43v2", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.1.6.36", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX45", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.17.142", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX49S", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.1.6.36", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX50", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.1.6.36", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX50v2", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.1.6.36", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX54S", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.1.6.36", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX54Sv2", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.1.6.36", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAX80", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.11.148", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RAXE500", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.2.14.110", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "RS700", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.0.9.6", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "XR1000", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.1.0.22", "versionType": "custom" } ], "defaultStatus": "unaffected" }, { "vendor": "NETGEAR", "product": "XR1000v2", "versions": [ { "status": "affected", "version": "0", "lessThan": "V1.1.0.22", "versionType": "custom" } ], "defaultStatus": "unaffected" } ], "descriptions": [ { "lang": "en", "value": "A command injection vulnerability in certain affected NETGEAR Nighthawk \ndevices allows a network-adjacent attacker with the ability to intercept\n and modify local network traffic (attacker in the middle) to compromise\n the confidentiality and integrity of the affected device.", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "A command injection vulnerability in certain affected NETGEAR Nighthawk \ndevices allows a network-adjacent attacker with the ability to intercept\n and modify local network traffic (attacker in the middle) to compromise\n the confidentiality and integrity of the affected device." } ] } ], "references": [ { "url": "https://www.netgear.com/support/product/mr60/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/mr70/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/ms90/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/mr90/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax20/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax35/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax200/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/ms60/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax41/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/ms70/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax41v2/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax35v2/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax42/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax42v2/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax43/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax49s/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax50/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax43v2/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax50v2/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax45/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/raxe500/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rax80/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/xr1000/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/rs700/", "tags": [ "product", "patch" ] }, { "url": "https://www.netgear.com/support/product/xr1000v2/", "tags": [ "product", "patch" ] }, { "url": "https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory", "tags": [ "vendor-advisory", "patch" ] } ], "metrics": [ { "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ], "cvssV4_0": { "attackVector": "ADJACENT", "attackComplexity": "HIGH", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "NONE", "exploitMaturity": "UNREPORTED", "Safety": "NOT_DEFINED", "Automatable": "NO", "Recovery": "USER", "valueDensity": "DIFFUSE", "vulnerabilityResponseEffort": "LOW", "providerUrgency": "AMBER", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 4.9, "vectorString": "CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:L/U:Amber" } } ], "solutions": [ { "lang": "en", "value": "Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:\n\nProductFixed VersionMR60 (EoS) Nighthawk Mesh WiFi 6 Router V1.1.8.142 https://www.netgear.com/support/product/mr60/ MR70 (EoS) Nighthawk Mesh WiFi 6 Router V1.0.4.48 https://www.netgear.com/support/product/mr70/ MR90 Nighthawk Tri-band Mesh WiFi 6E Router V1.0.2.46 https://www.netgear.com/support/product/mr90/ MS60 Nighthawk Mesh WiFi 6 Add-on Satellite V1.1.8.142 https://www.netgear.com/support/product/ms60/ MS70 Nighthawk Mesh WiFi 6 Add-on Satellite V1.0.4.48 https://www.netgear.com/support/product/ms70/ MS90 Nighthawk Tri-band Mesh WiFi 6E Add-on Satellite V1.0.2.46 https://www.netgear.com/support/product/ms90/ RAX20 (EoS) 4-Stream AX1800 WiFi 6 Router V1.0.17.142 https://www.netgear.com/support/product/rax20/ RAX200 (EoS) Nighthawk Tri-Band AX12 12-Stream WiFi Router V1.0.11.148 https://www.netgear.com/support/product/rax200/ RAX35 (EoS) Nighthawk AX4 4-Stream WiFi 6 Router V1.0.17.142 https://www.netgear.com/support/product/rax35/ RAX35v2 Nighthawk AX4 4-Stream AX3000 WiFi 6 Router V1.0.17.142 https://www.netgear.com/support/product/rax35v2/ RAX41 (EoS) Nighthawk AX5 5-Stream AX3600 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax41/ RAX41v2 Nighthawk AX5 5-Stream AX3600 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax41v2/ RAX42 (EoS) Nighthawk AX5 5-Stream AX4200 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax42/ RAX42v2 Nighthawk AX5 5-Stream AX4200 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax42v2/ RAX43 Nighthawk AX5 5-Stream AX4200 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax43/ RAX43v2 Nighthawk AX5 5-Stream AX4200 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax43v2/ RAX45 (EoS) Nighthawk AX6 6-Stream AX4300 WiFi Router V1.0.17.142 https://www.netgear.com/support/product/rax45/ RAX49S Nighthawk AX6 6-Stream AX5300 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax49s/ RAX50 Nighthawk AX6 6-Stream AX5400 WiFi 6 Router V1.1.6.36 https://www.netgear.com/support/product/rax50/ RAX50v2 Nighthawk AX6 6-Stream AX5400 WiFi 6 Router V1.1.6.36 https://www.netgear.com/support/product/rax50v2/ RAX54S Nighthawk AX6 6-Stream AX5400 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax54s/ RAX54Sv2 Nighthawk AX6 6-Stream AX5400 WiFi Router V1.1.6.36 https://www.netgear.com/support/product/rax54sv2/ RAX80 (EoS) Nighthawk AX8 8-Stream WiFi Router V1.0.11.148 https://www.netgear.com/support/product/rax80/ RAXE500 Nighthawk AX12 12-Stream AXE11000 Tri-Band WiFi 6E Router V1.2.14.110 https://www.netgear.com/support/product/raxe500/ RS700 Nighthawk BE19000 WiFi 7 Tri-Band Router V1.0.9.6 https://www.netgear.com/support/product/rs700/ XR1000 Nighthawk WiFi 6 Pro Gaming Router V1.1.0.22 https://www.netgear.com/support/product/xr1000/ XR1000v2 Nighthawk WiFi 6 Pro Gaming Router V1.1.0.22 https://www.netgear.com/support/product/xr1000v2/ \n\nModels marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "

Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:

ProductFixed Version
MR60 (EoS) Nighthawk Mesh WiFi 6 RouterV1.1.8.142
MR70 (EoS) Nighthawk Mesh WiFi 6 RouterV1.0.4.48
MR90 Nighthawk Tri-band Mesh WiFi 6E RouterV1.0.2.46
MS60 Nighthawk Mesh WiFi 6 Add-on SatelliteV1.1.8.142
MS70 Nighthawk Mesh WiFi 6 Add-on SatelliteV1.0.4.48
MS90 Nighthawk Tri-band Mesh WiFi 6E Add-on SatelliteV1.0.2.46
RAX20 (EoS) 4-Stream AX1800 WiFi 6 RouterV1.0.17.142
RAX200 (EoS) Nighthawk Tri-Band AX12 12-Stream WiFi RouterV1.0.11.148
RAX35 (EoS) Nighthawk AX4 4-Stream WiFi 6 RouterV1.0.17.142
RAX35v2 Nighthawk AX4 4-Stream AX3000 WiFi 6 RouterV1.0.17.142
RAX41 (EoS) Nighthawk AX5 5-Stream AX3600 WiFi RouterV1.1.6.36
RAX41v2 Nighthawk AX5 5-Stream AX3600 WiFi RouterV1.1.6.36
RAX42 (EoS) Nighthawk AX5 5-Stream AX4200 WiFi RouterV1.1.6.36
RAX42v2 Nighthawk AX5 5-Stream AX4200 WiFi RouterV1.1.6.36
RAX43 Nighthawk AX5 5-Stream AX4200 WiFi RouterV1.1.6.36
RAX43v2 Nighthawk AX5 5-Stream AX4200 WiFi RouterV1.1.6.36
RAX45 (EoS) Nighthawk AX6 6-Stream AX4300 WiFi RouterV1.0.17.142
RAX49S Nighthawk AX6 6-Stream AX5300 WiFi RouterV1.1.6.36
RAX50 Nighthawk AX6 6-Stream AX5400 WiFi 6 RouterV1.1.6.36
RAX50v2 Nighthawk AX6 6-Stream AX5400 WiFi 6 RouterV1.1.6.36
RAX54S Nighthawk AX6 6-Stream AX5400 WiFi RouterV1.1.6.36
RAX54Sv2 Nighthawk AX6 6-Stream AX5400 WiFi RouterV1.1.6.36
RAX80 (EoS) Nighthawk AX8 8-Stream WiFi RouterV1.0.11.148
RAXE500 Nighthawk AX12 12-Stream AXE11000 Tri-Band WiFi 6E RouterV1.2.14.110
RS700 Nighthawk BE19000 WiFi 7 Tri-Band RouterV1.0.9.6
XR1000 Nighthawk WiFi 6 Pro Gaming RouterV1.1.0.22
XR1000v2 Nighthawk WiFi 6 Pro Gaming RouterV1.1.0.22

Models marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.

" } ] } ], "credits": [ { "lang": "en", "value": "fluorescent", "type": "finder" } ], "source": { "discovery": "EXTERNAL" }, "x_generator": { "engine": "Vulnogram 1.0.3" } }, "adp": [ { "metrics": [ { "other": { "type": "ssvc", "content": { "timestamp": "2026-08-11T00:00:00+00:00", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "total" } ], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-11739" } } } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-12T04:00:35.293Z" } } ] } }