Medium · 4.3 CVE-2026-11738 EUVD-2026-56193GHSA-vq25-x3jw-cmr7

Insufficient input validation in certain NETGEAR Nighthawk routers allows administrators to tamper with the device.

Published Aug 11, 2026 · Updated Aug 12, 2026 · Assigned by NETGEAR

Vendor: NETGEAR Product: R7000 Product: RAXE500 Product: RS700 Category: Network devices

Description

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.

Affected products

Vendor	Product	Affected	Fixed
NETGEAR	R7000	—	—
NETGEAR	RAXE500	< V1.2.14.114	V1.2.14.114
NETGEAR	RS700	< V1.0.7.66	V1.0.7.66

References

https://www.netgear.com/support/product/r7000/ product patch
https://www.netgear.com/support/product/rs700/ product patch
https://www.netgear.com/support/product/raxe500/ product patch
https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory vendor-advisory patch