A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.
Advisories

No advisories yet.

Fixes

Solution

Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in: ProductFixed VersionBE9300 Nighthawk WiFi 7 Tri-Band Router V1.0.1.84 https://www.netgear.com/support/product/be9300/ MR60 (EoS) Nighthawk Mesh WiFi 6 Router V1.1.8.142 https://www.netgear.com/support/product/mr60/ MS60 Nighthawk Mesh WiFi 6 Add-on Satellite V1.1.8.142 https://www.netgear.com/support/product/ms60/ R6700AX (EoS) 4-Stream AX1800 WiFi 6 Router V1.0.18.164 https://www.netgear.com/support/product/r6700ax/ RAX10 4-Stream AX1800 WiFi 6 Router V1.0.5.50 https://www.netgear.com/support/product/rax10/ RAX120 (EoS) Nighthawk AX12 12-Stream WiFi Router V1.2.10.56 https://www.netgear.com/support/product/rax120/ RAX120v2 Nighthawk AX12 12-Stream AX6000 WiFi Router V1.2.10.56 https://www.netgear.com/support/product/rax120v2/ RAX20 (EoS) 4-Stream AX1800 WiFi 6 Router V1.0.17.142 https://www.netgear.com/support/product/rax20/ RAX28 (EoS) Nighthawk AX5 5-Stream AX2200 WiFi 6 Router V1.0.14.108 https://www.netgear.com/support/product/rax28/ RAX29 Nighthawk AX2400 WiFi 6 Router V1.0.14.108 https://www.netgear.com/support/product/rax29/ RAX30 (EoS) Nighthawk AX5 5-Stream AX2400 WiFi 6 Router V1.0.14.108 https://www.netgear.com/support/product/rax30/ RAX36S Nighthawk AX4 4-Stream AX3000 WiFi Router V1.0.5.50 https://www.netgear.com/support/product/rax36s/ RAX43 Nighthawk AX5 5-Stream AX4200 WiFi Router V1.0.17.142 https://www.netgear.com/support/product/rax43/ RAX45 (EoS) Nighthawk AX6 6-Stream AX4300 WiFi Router V1.0.17.142 https://www.netgear.com/support/product/rax45/ RAX50 Nighthawk AX6 6-Stream AX5400 WiFi 6 Router V1.0.17.142 https://www.netgear.com/support/product/rax50/ RAX70 Nighthawk Tri-band AX8 8-Stream AX6600 WiFi 6 Router V1.0.19.172 https://www.netgear.com/support/product/rax70/ RBR760 Orbi Tri-Band Mesh WiFi 6 Router V6.3.8.11 https://www.netgear.com/support/product/rbr760/ RBS760 Orbi Tri-Band Mesh WiFi 6 Add-on Satellite V6.3.8.11 https://www.netgear.com/support/product/rbs760/ RS100 Nighthawk WiFi 7 Dual-Band Router V1.0.1.80 https://www.netgear.com/support/product/rs100/ RS200 Nighthawk BE6500 WiFi 7 Dual-Band Router V1.0.1.90 https://www.netgear.com/support/product/rs200/ RS280 Nighthawk BE9200 WiFi 7 Tri-Band Router V1.0.1.90 https://www.netgear.com/support/product/rs280/ RS300 Nighthawk BE9300 WiFi 7 Tri-Band Router V1.0.1.90 https://www.netgear.com/support/product/rs300/ RS500 Nighthawk BE12000 WiFi 7 Tri-Band Router V1.0.1.90 https://www.netgear.com/support/product/rs500/ RS600 Nighthawk BE18000 WiFi 7 Tri-Band Router V1.0.1.90 https://www.netgear.com/support/product/rs600/ RS70 Nighthawk WiFi 7 Dual-Band Router V1.0.1.80 https://www.netgear.com/support/product/rs70/ RS90 Nighthawk WiFi 7 Dual-Band Router V1.0.1.80 https://www.netgear.com/support/product/rs90/ Models marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.


Workaround

No workaround given by the vendor.

History

Wed, 09 Sep 2026 03:15:00 +0000

Type Values Removed Values Added
First Time appeared Netgear
Netgear be9300
Netgear be9300 Firmware
Netgear mr60
Netgear mr60 Firmware
Netgear ms60
Netgear ms60 Firmware
Netgear r6700ax
Netgear r6700ax Firmware
Netgear rax10
Netgear rax10 Firmware
Netgear rax120
Netgear rax120 Firmware
Netgear rax120v2
Netgear rax120v2 Firmware
Netgear rax20
Netgear rax20 Firmware
Netgear rax28
Netgear rax28 Firmware
Netgear rax29
Netgear rax29 Firmware
Netgear rax30
Netgear rax30 Firmware
Netgear rax36s
Netgear rax36s Firmware
Netgear rax43
Netgear rax43 Firmware
Netgear rax45
Netgear rax45 Firmware
Netgear rax50
Netgear rax50 Firmware
Netgear rax70
Netgear rax70 Firmware
Netgear rbr760
Netgear rbr760 Firmware
Netgear rbs760
Netgear rbs760 Firmware
Netgear rs100
Netgear rs100 Firmware
Netgear rs200
Netgear rs200 Firmware
Netgear rs280
Netgear rs280 Firmware
Netgear rs300
Netgear rs300 Firmware
Netgear rs500
Netgear rs500 Firmware
Netgear rs600
Netgear rs600 Firmware
Netgear rs70
Netgear rs70 Firmware
Netgear rs90
Netgear rs90 Firmware
Weaknesses CWE-77
CPEs cpe:2.3:h:netgear:be9300:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:r6700ax:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax10:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax120:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax120v2:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax28:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax29:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax30:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax36s:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax43:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax70:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr760:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs760:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rs100:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rs200:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rs280:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rs300:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rs500:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rs600:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rs70:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rs90:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:be9300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:r6700ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax10_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax120_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax120v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax28_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax29_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax30_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax36s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax43_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax70_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbr760_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbs760_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rs100_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rs200_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rs280_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rs300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rs500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rs600_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rs70_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rs90_firmware:*:*:*:*:*:*:*:*
Vendors & Products Netgear
Netgear be9300
Netgear be9300 Firmware
Netgear mr60
Netgear mr60 Firmware
Netgear ms60
Netgear ms60 Firmware
Netgear r6700ax
Netgear r6700ax Firmware
Netgear rax10
Netgear rax10 Firmware
Netgear rax120
Netgear rax120 Firmware
Netgear rax120v2
Netgear rax120v2 Firmware
Netgear rax20
Netgear rax20 Firmware
Netgear rax28
Netgear rax28 Firmware
Netgear rax29
Netgear rax29 Firmware
Netgear rax30
Netgear rax30 Firmware
Netgear rax36s
Netgear rax36s Firmware
Netgear rax43
Netgear rax43 Firmware
Netgear rax45
Netgear rax45 Firmware
Netgear rax50
Netgear rax50 Firmware
Netgear rax70
Netgear rax70 Firmware
Netgear rbr760
Netgear rbr760 Firmware
Netgear rbs760
Netgear rbs760 Firmware
Netgear rs100
Netgear rs100 Firmware
Netgear rs200
Netgear rs200 Firmware
Netgear rs280
Netgear rs280 Firmware
Netgear rs300
Netgear rs300 Firmware
Netgear rs500
Netgear rs500 Firmware
Netgear rs600
Netgear rs600 Firmware
Netgear rs70
Netgear rs70 Firmware
Netgear rs90
Netgear rs90 Firmware
Metrics cvssV3_1

{'score': 6.8, 'vector': 'CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'}


Wed, 12 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 12 Aug 2026 08:15:00 +0000


Tue, 11 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
Description A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.
Title Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers
Weaknesses CWE-295
References
Metrics cvssV4_0

{'score': 4.9, 'vector': 'CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:L/U:Amber'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: NETGEAR

Published:

Updated: 2026-08-12T14:42:32.098Z

Reserved: 2026-06-09T15:57:56.506Z

Link: CVE-2026-11814

cve-icon Vulnrichment

Updated: 2026-08-12T14:42:23.990Z

cve-icon NVD

Status : Analyzed

Published: 2026-08-11T16:17:28.540

Modified: 2026-09-09T03:00:03.993

Link: CVE-2026-11814

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-11T23:00:07Z

Weaknesses