GHSA-7w3c-j7rc-7ffvMedium
A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker...
🔗 CVE IDs covered (1)
📋 Description
A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.
🔗 References (29)
- https://nvd.nist.gov/vuln/detail/CVE-2026-11814
- https://www.netgear.com/support/product/be9300
- https://www.netgear.com/support/product/mr60
- https://www.netgear.com/support/product/ms60
- https://www.netgear.com/support/product/r6700ax
- https://www.netgear.com/support/product/rax10
- https://www.netgear.com/support/product/rax120
- https://www.netgear.com/support/product/rax120v2
- https://www.netgear.com/support/product/rax20
- https://www.netgear.com/support/product/rax28
- https://www.netgear.com/support/product/rax29
- https://www.netgear.com/support/product/rax30
- https://www.netgear.com/support/product/rax36s
- https://www.netgear.com/support/product/rax43
- https://www.netgear.com/support/product/rax45
- https://www.netgear.com/support/product/rax50
- https://www.netgear.com/support/product/rax70
- https://www.netgear.com/support/product/rbr760
- https://www.netgear.com/support/product/rbs760
- https://www.netgear.com/support/product/rs100
- https://www.netgear.com/support/product/rs200
- https://www.netgear.com/support/product/rs280
- https://www.netgear.com/support/product/rs300
- https://www.netgear.com/support/product/rs500
- https://www.netgear.com/support/product/rs600
- https://www.netgear.com/support/product/rs70
- https://www.netgear.com/support/product/rs90
- https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-Advisory
- https://github.com/advisories/GHSA-7w3c-j7rc-7ffv