Dashboard / CVE-2026-11737

CVE-2026-11737

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 39/100
Published: 2026-08-11 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: High
UI: None
S: X
AT: None
VC: None
VI: High
VA: None

Description

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality.

Weakness Classification (1)

Affected Software (13)

VendorProductVersion
netgear rax20_firmware < 1.0.18.144
netgear rax41_firmware < 1.1.6.36
netgear rax41v2_firmware < 1.1.6.36
netgear rax42_firmware < 1.1.6.36
netgear rax42v2_firmware < 1.1.6.36
netgear rax43_firmware < 1.1.6.36
netgear rax43v2_firmware < 1.1.6.36
netgear rax45_firmware < 1.0.17.142
netgear rax49s_firmware < 1.1.6.36
netgear rax50_firmware < 1.1.6.36
netgear rax50v2_firmware < 1.1.6.36
netgear rax54s_firmware < 1.1.6.36
netgear rax54sv2_firmware < 1.1.6.36

References & Advisories (12)

Bug Bounty Relevance

39 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

4.3 / 10.0 v4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber

EPSS — Exploitation Probability

0.33%
Raw Score 0.003310
Percentile 26.3%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00331
2026-10-28
0.00331

Intelligence Sources

nvd ref →

External Links