# CVE-2026-11737: Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected…

Source: https://junglewise.ai/threats/cve-2026-11737-insufficient-input-validation-vulnerability-in-the-listed-netgear  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-11  
License: CC BY 4.0 with a link back

CVE-2026-11737 · Severity: medium · CVSS 4.5 · Published 2026-08-11

Insufficient input validation vulnerability in the listed 
NETGEAR models allows authenticated administrators connected to the 
local network to make unauthorized modification to the device software and 
functionality.

Technologies: [NETGEAR RAX20](https://junglewise.ai/threats/technologies/rax20), [NETGEAR Rax20 Firmware](https://junglewise.ai/threats/technologies/rax20-firmware), [NETGEAR RAX41](https://junglewise.ai/threats/technologies/rax41), [NETGEAR Rax41 Firmware](https://junglewise.ai/threats/technologies/rax41-firmware), [NETGEAR RAX41v2](https://junglewise.ai/threats/technologies/rax41v2), [NETGEAR Rax41v2 Firmware](https://junglewise.ai/threats/technologies/rax41v2-firmware), [NETGEAR RAX42](https://junglewise.ai/threats/technologies/rax42), [NETGEAR Rax42 Firmware](https://junglewise.ai/threats/technologies/rax42-firmware), [NETGEAR RAX42v2](https://junglewise.ai/threats/technologies/rax42v2), [NETGEAR Rax42v2 Firmware](https://junglewise.ai/threats/technologies/rax42v2-firmware), [NETGEAR RAX43](https://junglewise.ai/threats/technologies/rax43), [NETGEAR Rax43 Firmware](https://junglewise.ai/threats/technologies/rax43-firmware), [NETGEAR RAX43v2](https://junglewise.ai/threats/technologies/rax43v2), [NETGEAR Rax43v2 Firmware](https://junglewise.ai/threats/technologies/rax43v2-firmware), [NETGEAR RAX45](https://junglewise.ai/threats/technologies/rax45), [NETGEAR Rax45 Firmware](https://junglewise.ai/threats/technologies/rax45-firmware), [NETGEAR RAX49s](https://junglewise.ai/threats/technologies/rax49s), [NETGEAR Rax49s Firmware](https://junglewise.ai/threats/technologies/rax49s-firmware), [NETGEAR RAX50](https://junglewise.ai/threats/technologies/rax50), [NETGEAR Rax50 Firmware](https://junglewise.ai/threats/technologies/rax50-firmware), [NETGEAR RAX50v2](https://junglewise.ai/threats/technologies/rax50v2), [NETGEAR Rax50v2 Firmware](https://junglewise.ai/threats/technologies/rax50v2-firmware), [NETGEAR RAX54S](https://junglewise.ai/threats/technologies/rax54s), [NETGEAR Rax54s Firmware](https://junglewise.ai/threats/technologies/rax54s-firmware), [NETGEAR RAX54sv2](https://junglewise.ai/threats/technologies/rax54sv2), [NETGEAR Rax54sv2 Firmware](https://junglewise.ai/threats/technologies/rax54sv2-firmware). Vendors: [NETGEAR](https://junglewise.ai/threats/vendors/netgear).

## Quick answers

**Is CVE-2026-11737 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-11737 being exploited in the wild.

**How severe is CVE-2026-11737?** Medium severity, with a CVSS score of 4.5, published 11 August 2026.

**Which products and versions are affected?** NETGEAR RAX20, NETGEAR Rax20 Firmware, NETGEAR RAX41, NETGEAR Rax41 Firmware and 22 more. The advisory does not name versions.

**Is there a fix for CVE-2026-11737?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-11737?** Check whether you run NETGEAR RAX20, NETGEAR Rax20 Firmware, NETGEAR RAX41 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- NETGEAR RAX20
- NETGEAR Rax20 Firmware
- NETGEAR RAX41
- NETGEAR Rax41 Firmware
- NETGEAR RAX41v2
- NETGEAR Rax41v2 Firmware
- NETGEAR RAX42
- NETGEAR Rax42 Firmware
- NETGEAR RAX42v2
- NETGEAR Rax42v2 Firmware
- NETGEAR RAX43
- NETGEAR Rax43 Firmware
- NETGEAR RAX43v2
- NETGEAR Rax43v2 Firmware
- NETGEAR RAX45
- NETGEAR Rax45 Firmware
- NETGEAR RAX49s
- NETGEAR Rax49s Firmware
- NETGEAR RAX50
- NETGEAR Rax50 Firmware
- NETGEAR RAX50v2
- NETGEAR Rax50v2 Firmware
- NETGEAR RAX54S
- NETGEAR Rax54s Firmware
- NETGEAR RAX54sv2
- NETGEAR Rax54sv2 Firmware

## Related threats

- [NETGEAR Nighthawk and Orbi routers command injection vulnerability](https://junglewise.ai/threats/cve-2026-11814-netgear-nighthawk-and-orbi-routers-command-injection)
- [A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker…](https://junglewise.ai/threats/cve-2026-11739-a-command-injection-vulnerability-in-certain-affected-netgear)
- [Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected…](https://junglewise.ai/threats/cve-2026-11738-insufficient-input-validation-vulnerability-in-the-listed-netgear)
- [A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt…](https://junglewise.ai/threats/cve-2026-11733-a-buffer-overflow-vulnerability-in-the-listed-netgear-models)
- [NETGEAR Nighthawk RAX series command execution via improper input validation](https://junglewise.ai/threats/cve-2026-62658-netgear-nighthawk-rax-series-command-execution-via-improper-input)