A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.
History

Tue, 11 Aug 2026 23:30:00 +0000

Type Values Removed Values Added
First Time appeared Netgear
Netgear mr60
Netgear mr70
Netgear mr90
Netgear ms60
Netgear ms70
Netgear ms90
Netgear rax20
Netgear rax200
Netgear rax35
Netgear rax35v2
Netgear rax41
Netgear rax41v2
Netgear rax42
Netgear rax42v2
Netgear rax43
Netgear rax43v2
Netgear rax45
Netgear rax49s
Netgear rax50
Netgear rax50v2
Netgear rax54s
Netgear rax54sv2
Netgear rax80
Netgear raxe500
Netgear rs700
Netgear xr1000
Netgear xr1000v2
Vendors & Products Netgear
Netgear mr60
Netgear mr70
Netgear mr90
Netgear ms60
Netgear ms70
Netgear ms90
Netgear rax20
Netgear rax200
Netgear rax35
Netgear rax35v2
Netgear rax41
Netgear rax41v2
Netgear rax42
Netgear rax42v2
Netgear rax43
Netgear rax43v2
Netgear rax45
Netgear rax49s
Netgear rax50
Netgear rax50v2
Netgear rax54s
Netgear rax54sv2
Netgear rax80
Netgear raxe500
Netgear rs700
Netgear xr1000
Netgear xr1000v2

Tue, 11 Aug 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 11 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
Description A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.
Title Command injection vulnerability in some NETGEAR Nighthawk devices
Weaknesses CWE-78
References
Metrics cvssV4_0

{'score': 4.9, 'vector': 'CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:L/U:Amber'}


cve-icon MITRE

Status: PUBLISHED

Assigner: NETGEAR

Published: 2026-08-11T15:06:14.908Z

Updated: 2026-08-12T04:00:35.293Z

Reserved: 2026-06-09T02:46:48.152Z

Link: CVE-2026-11739

cve-icon Vulnrichment

Updated: 2026-08-11T19:24:28.548Z

cve-icon NVD

Status : Received

Published: 2026-08-11T16:17:28.260

Modified: 2026-08-12T05:17:41.227

Link: CVE-2026-11739

cve-icon Redhat

No data.