Auth Bypass in NETGEAR RAX Router Mgmt Service
CVE-2026-11731 Published on October 13, 2026
Authentication Bypass Vulnerability in Certain NETGEAR RAX Series Models
An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected devices management service to access certain device information or modify administrative settings. This vulnerability may impact the confidentiality and integrity of management data and the availability of device-management functions.
Vulnerability Analysis
Attack Vector:
ADJACENT
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Weakness Type
Authentication Bypass Using an Alternate Path or Channel
A product requires authentication, but the product has an alternate path or channel that does not require authentication.
Affected Versions
NETGEAR RAX30:- Before v1.0.15.110 is affected.
- Before v1.0.15.110 is affected.
- Before v1.0.15.110 is affected.