NETGEAR router stack-based buffer overflow via auth admin
CVE-2026-11736 Published on August 11, 2026

Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers
A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality.

Vendor Advisory NVD

Vulnerability Analysis

Attack Vector:
ADJACENT
Attack Complexity:
HIGH
Privileges Required:
HIGH
User Interaction:
NONE

Weakness Type

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.


Products Associated with CVE-2026-11736

Want to know whenever a new CVE is published for Netgear products? stack.watch will email you.

Netgear Rax20
 
Netgear Rax35v2
 
Netgear Rax41
 
Netgear Rax41v2
 
Netgear Rax42
 
Netgear Rax42v2
 
Netgear Rax43
 
Netgear Rax43v2
 
Netgear Rax45
 
Netgear Rax49s
 
Netgear Rax50
 
Netgear Rax50s
 
Netgear Rax50v2
 
Netgear Rax54sv2
 
Netgear Rax54v2
 
Netgear Raxe450
 
Netgear Raxe500
 
Netgear Xr1000
 
Netgear Xr1000v2
 

Affected Versions

NETGEAR RAX20: NETGEAR RAX35v2: NETGEAR RAX41: NETGEAR RAX41v2: NETGEAR RAX42: NETGEAR RAX42v2: NETGEAR RAX43: NETGEAR RAX43v2: NETGEAR RAX45: NETGEAR RAX49S: NETGEAR RAX50: NETGEAR RAX50S: NETGEAR RAX50v2: NETGEAR RAX54Sv2: NETGEAR RAX54v2: NETGEAR RAXE450: NETGEAR RAXE500: NETGEAR XR1000: NETGEAR XR1000v2:

Exploit Probability

EPSS
0.51%
Percentile
41.04%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.