Is CVE-2026-11732 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-11732 being exploited in the wild.

How severe is CVE-2026-11732?

High severity, with a CVSS score of 8.8, published 13 October 2026.

Which products and versions are affected?

NETGEAR CAX30 before 2.3.4.12; NETGEAR RAX30 before 1.0.14.108; NETGEAR Rax5 before 1.0.5.34; NETGEAR RAXE300 before 1.0.10.72.

How is CVE-2026-11732 attacked?

It is attacked from the adjacent network, in a network appliance.

Am I affected by CVE-2026-11732?

Check whether you run NETGEAR CAX30, NETGEAR RAX30, NETGEAR Rax5 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-11732: NETGEAR RAX/CAX router insufficient input validation in Block Sites

CVE-2026-11732 · Severity: high · CVSS 8.8 · Published 2026-10-13

NETGEAR routers with the Block Sites feature enabled contain a vulnerability that allows attackers with WiFi access to run unauthorized commands on the device. This could compromise the router's security, allowing attackers to intercept traffic, modify settings, or disrupt network access. The vulnerability only affects users who have the Block Sites content filtering feature turned on.

Technologies: NETGEAR RAX30, NETGEAR RAXE300. Vendors: NETGEAR.

Quick answers

Is CVE-2026-11732 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-11732 being exploited in the wild.
How severe is CVE-2026-11732?: High severity, with a CVSS score of 8.8, published 13 October 2026.
Which products and versions are affected?: NETGEAR CAX30 before 2.3.4.12; NETGEAR RAX30 before 1.0.14.108; NETGEAR Rax5 before 1.0.5.34; NETGEAR RAXE300 before 1.0.10.72.
Is there a fix for CVE-2026-11732?: Yes: fixed in CAX30 V2.3.4.12; RAX30 V1.0.14.108; RAX5 V1.0.5.34; RAXE300 V1.0.10.72. Until then: Disable the Block Sites feature if not required until a firmware update can be applied; enable automatic firmware updates on supported devices to receive patches automatically. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-11732 attacked?: It is attacked from the adjacent network, in a network appliance.
Am I affected by CVE-2026-11732?: Check whether you run NETGEAR CAX30, NETGEAR RAX30, NETGEAR Rax5 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: CAX30 V2.3.4.12; RAX30 V1.0.14.108; RAX5 V1.0.5.34; RAXE300 V1.0.10.72

Disable the Block Sites feature if not required until a firmware update can be applied; enable automatic firmware updates on supported devices to receive patches automatically.

Technical details

An insufficient input validation vulnerability in the Block Sites (website blocking) feature allows a network-adjacent attacker with WiFi credentials to execute arbitrary commands on the router. The vulnerability affects RAX and CAX series routers when the Block Sites feature is enabled. A fix is available via firmware updates for affected models.

Affected products

NETGEAR CAX30 before 2.3.4.12
NETGEAR RAX30 before 1.0.14.108
NETGEAR RAX5 before 1.0.5.34
NETGEAR RAXE300 before 1.0.10.72

Timeline

2026-10-13: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.