CVE-2026-11739

MEDIUM
MEDIUM Priority: 0.12 BB Relevance: 45/100
Published: 2026-08-11 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: High
PR: None
UI: None
S: X
AT: Present
VC: High
VI: High
VA: None

Description

A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.

Weakness Classification (1)

Affected Software (27)

Bug Bounty Relevance

45 / 100
✓ No authentication
✓ No user interaction

CVSS Score

4.9 / 10.0 v4.0
CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber

EPSS — Exploitation Probability

2.55%
Raw Score 0.025500
Percentile 85.0%
Date 2026-10-29

EPSS Trend

2026-10-29
0.02550
2026-10-28
0.02550

Intelligence Sources

nvd ref →