CVE-2026-11738
4.4 MoyenneDescription
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
Produits concernés
- NETGEAR R7000
- NETGEAR RAXE500
- NETGEAR RS700
- Netgear be9300 firmware
- Netgear mr60 firmware
- Netgear ms60 firmware
- Netgear r6700ax firmware
- Netgear rax10 firmware
- Netgear rax120 firmware
- Netgear rax120v2 firmware
- Netgear rax20 firmware
- Netgear rax28 firmware
- Netgear rax29 firmware
- Netgear rax30 firmware
- Netgear rax36s firmware
- Netgear rax43 firmware
- Netgear rax45 firmware
- Netgear rax50 firmware
- Netgear rax70 firmware
- Netgear rbr760 firmware
- Netgear rbs760 firmware
- Netgear rs100 firmware
- Netgear rs200 firmware
- Netgear rs280 firmware
- Netgear rs300 firmware
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 4.0 | 4.3 Moyenne | a2826606-91e7-4eb6-899e-8484bd4575d5 | CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:L/U:Amber |
| 3.1 | 4.4 Moyenne | nvd@nist.gov (NVD) | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N |