NETGEAR's Product Security Team has assessed the following product vulnerabilities and provided guidance to address these vulnerabilities in the table below.
Because firmware updates contain security fixes, bug fixes, and new features for your products, we strongly advise you to enable automatic firmware updates on supported devices. For older products, we advise you to download and install new firmware updates as soon as possible or follow the guidance provided for devices that require other remediation steps.
CVE-2026-11732 Insufficient input validation vulnerability in some NETGEAR RAX/CAX series routers
An insufficient input validation vulnerability in the website blocking feature (Block Sites) of affected routers allows a network-adjacent attacker with network access (such as WiFi credentials) to run unauthorized commands. This vulnerability could affect the confidentiality, integrity, and availability of affected routers. The vulnerability only possible on affected routers with the Block Sites feature enabled.
Severity: MEDIUM
Acknowledgments: kaoken
Recommendation
Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:
| Product | Fixed Version |
|---|---|
| CAX30 Nighthawk AX6 6-Stream WiFi 6 Cable Modem Router | V2.3.4.12 |
| RAX30 Nighthawk AX5 5-Stream AX2400 WiFi 6 Router | V1.0.14.108 |
| RAX5 (EoS) 4-Stream AX1600 WiFi 6 Router | V1.0.5.34 |
| RAXE300 Nighthawk AXE7800 Tri-Band WiFi 6E Router | V1.0.10.72 |
Models marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.
CVE-2026-11731 Authentication bypass vulnerability in some NETGEAR RAX series routers
An authentication bypass vulnerability in affected RAX series routers allows an unauthenticated attacker with adjacent access to the affected device's management service to access certain device information or modify administrative settings. This vulnerability might impact the confidentiality or integrity of management data and the availability of device-management functions.
Severity: MEDIUM
Acknowledgments: Yanming Chen of Guangzhou University, Michael Gentile
Recommendation
Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:
| Product | Fixed Version |
|---|---|
| RAX28 Nighthawk AX5 5-Stream AX2200 WiFi 6 Router | v1.0.15.110 |
| RAX29 Nighthawk AX2400 WiFi 6 Router | v1.0.15.110 |
| RAX30 Nighthawk AX5 5-Stream AX2400 WiFi 6 Router | v1.0.15.110 |
CVE-2026-11730 Insufficient session randomness vulnerability in some NETGEAR EX series extenders
Insufficient session randomness vulnerability in affected NETGEAR extenders allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal.
Severity: MEDIUM
Acknowledgments: KDec5ae262-35b5-41c5-9bc1-91ad34145487 and Austin Turecek (Collaborator)
Recommendation
Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:
| Product | Fixed Version |
|---|---|
| EX3700 (EoS) AC750 WiFi Range Extender Essentials Edition | V1.0.0.102 |
| EX6120 AC1200 Dual Band WiFi Range Extender | V1.0.1.74 |
Models marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.
CVE-2026-9218 Insufficient input validation vulnerability in some NETGEAR routers
Insufficient input validation vulnerability in the time server(NTP) setting of affected routers allows an attacker connected to the router's local network and has the router's administrator credentials to run unauthorized commands on the router. This vulnerability could impact the integrity of affected routers. There is no impact on confidentiality or availability of affected routers.
Severity: MEDIUM
Acknowledgments: unprovable
Recommendation
Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:
| Product | Fixed Version |
|---|---|
| CBR40 (EoS) Orbi AC2200 Tri-band WiFi Cable Modem Router | Won't Fix |
| R7000 (EoS) Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router | v1.0.11.130 |
| R7000P (EoS) Nighthawk AC2300 Smart WiFi Dual Band Gigabit Router | V1.3.3.152 |
| RAX40 (EoS) Nighthawk AX4 4-Stream WiFi Router | V1.0.3.64 |
Models marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.
CVE-2026-107918 Insufficient input validation vulnerability in the NETGEAR R7300 router
Insufficient input validation vulnerability in the LAN Setup feature of the R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.
This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.
Severity: MEDIUM
Acknowledgments: Security Research Center (SRC) @ Concordia University
Affected Products
Recommendation
Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:
| Product | Fixed Version |
|---|---|
| R7300DST (EoS) Nighthawk AC1900 DST Router & Adapter | Won't Fix |
Models marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.
Insufficient input validation vulnerability in the PPPoE Setup feature of the R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.
This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.
Severity: MEDIUM
Acknowledgments: Security Research Center (SRC) @ Concordia University
Affected Products
Recommendation
Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:
| Product | Fixed Version |
|---|---|
| R7300DST (EoS) Nighthawk AC1900 DST Router & Adapter | Won't Fix |
Models marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.
Disclaimer: This document is provided on an "as is" basis and does not imply any kind of guarantee or warranty, including the warranties of merchantability or fitness for a particular use. Your use of the information in the document or materials linked to the document is at your own risk. NETGEAR reserves the right to change or update this document at any time. NETGEAR expects to update this document as new information becomes available.
The above-listed vulnerabilities remain if you do not complete all recommended steps. NETGEAR is not responsible for any consequences that could have been avoided by following the recommendations in this notification.