CVE-2026-11734

LOW
INFO Priority: 0.01 BB Relevance: 32/100
Published: 2026-08-11 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Interaction

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: High
UI: None
S: X
AT: None
VC: None
VI: None
VA: Low

Description

A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.

Weakness Classification (1)

Affected Software (15)

VendorProductVersion
netgear mr70_firmware < 1.0.4.48
netgear mr90_firmware < 1.0.2.46
netgear ms70_firmware < 1.0.4.48
netgear ms90_firmware < 1.0.2.46
netgear rax41_firmware < 1.1.6.36
netgear rax41v2_firmware < 1.1.6.36
netgear rax42_firmware < 1.1.6.36
netgear rax42v2_firmware < 1.1.6.36
netgear rax43_firmware < 1.1.6.36
netgear rax43v2_firmware < 1.1.6.36
netgear rax49s_firmware < 1.1.6.36
netgear rax50_firmware < 1.1.6.36
netgear rax50v2_firmware < 1.1.6.36
netgear rax54s_firmware < 1.1.6.36
netgear rax54sv2_firmware < 1.1.6.36

Bug Bounty Relevance

32 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

1.1 / 10.0 v4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:D/RE:L/U:Amber

EPSS — Exploitation Probability

0.89%
Raw Score 0.008860
Percentile 59.2%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00886
2026-10-28
0.00886

Intelligence Sources

nvd ref →