# CVE-2026-11738: Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected…

Source: https://junglewise.ai/threats/cve-2026-11738-insufficient-input-validation-vulnerability-in-the-listed-netgear  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-11  
License: CC BY 4.0 with a link back

CVE-2026-11738 · Severity: medium · CVSS 4.4 · Published 2026-08-11

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.

Technologies: [NETGEAR MR60](https://junglewise.ai/threats/technologies/mr60), [NETGEAR Mr60 Firmware](https://junglewise.ai/threats/technologies/mr60-firmware), [NETGEAR MS60](https://junglewise.ai/threats/technologies/ms60), [NETGEAR Ms60 Firmware](https://junglewise.ai/threats/technologies/ms60-firmware), [NETGEAR RAX20](https://junglewise.ai/threats/technologies/rax20), [NETGEAR Rax20 Firmware](https://junglewise.ai/threats/technologies/rax20-firmware), [NETGEAR Rax28](https://junglewise.ai/threats/technologies/rax28), [NETGEAR Rax29](https://junglewise.ai/threats/technologies/rax29), [NETGEAR RAX30](https://junglewise.ai/threats/technologies/rax30), [NETGEAR Rax30 Firmware](https://junglewise.ai/threats/technologies/rax30-firmware), [NETGEAR RAX43](https://junglewise.ai/threats/technologies/rax43), [NETGEAR Rax43 Firmware](https://junglewise.ai/threats/technologies/rax43-firmware), [NETGEAR RAX45](https://junglewise.ai/threats/technologies/rax45), [NETGEAR Rax45 Firmware](https://junglewise.ai/threats/technologies/rax45-firmware), [NETGEAR RAX50](https://junglewise.ai/threats/technologies/rax50), [NETGEAR Rax50 Firmware](https://junglewise.ai/threats/technologies/rax50-firmware). Vendors: [NETGEAR](https://junglewise.ai/threats/vendors/netgear).

## Quick answers

**Is CVE-2026-11738 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-11738 being exploited in the wild.

**How severe is CVE-2026-11738?** Medium severity, with a CVSS score of 4.4, published 11 August 2026.

**Which products and versions are affected?** NETGEAR Be9300, NETGEAR Be9300 Firmware, NETGEAR MR60, NETGEAR Mr60 Firmware and 48 more. The advisory does not name versions.

**Is there a fix for CVE-2026-11738?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-11738?** Check whether you run NETGEAR Be9300, NETGEAR Be9300 Firmware, NETGEAR MR60 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- NETGEAR Be9300
- NETGEAR Be9300 Firmware
- NETGEAR MR60
- NETGEAR Mr60 Firmware
- NETGEAR MS60
- NETGEAR Ms60 Firmware
- NETGEAR R6700ax
- NETGEAR R6700ax Firmware
- NETGEAR Rax10
- NETGEAR Rax10 Firmware
- NETGEAR Rax120
- NETGEAR Rax120 Firmware
- NETGEAR Rax120v2
- NETGEAR Rax120v2 Firmware
- NETGEAR RAX20
- NETGEAR Rax20 Firmware
- NETGEAR Rax28
- NETGEAR Rax28 Firmware
- NETGEAR Rax29
- NETGEAR Rax29 Firmware
- NETGEAR RAX30
- NETGEAR Rax30 Firmware
- NETGEAR Rax36s
- NETGEAR Rax36s Firmware
- NETGEAR RAX43
- NETGEAR Rax43 Firmware
- NETGEAR RAX45
- NETGEAR Rax45 Firmware
- NETGEAR RAX50
- NETGEAR Rax50 Firmware
- NETGEAR Rax70
- NETGEAR Rax70 Firmware
- NETGEAR Rbr760
- NETGEAR Rbr760 Firmware
- NETGEAR Rbs760
- NETGEAR Rbs760 Firmware
- NETGEAR Rs100
- NETGEAR Rs100 Firmware
- NETGEAR Rs200
- NETGEAR Rs200 Firmware
- NETGEAR Rs280
- NETGEAR Rs280 Firmware
- NETGEAR Rs300
- NETGEAR Rs300 Firmware
- NETGEAR Rs500
- NETGEAR Rs500 Firmware
- NETGEAR Rs600
- NETGEAR Rs600 Firmware
- NETGEAR Rs70
- NETGEAR Rs70 Firmware
- NETGEAR Rs90
- NETGEAR Rs90 Firmware

## Related threats

- [NETGEAR RAX/CAX router insufficient input validation in Block Sites](https://junglewise.ai/threats/cve-2026-11732-an-insufficient-input-validation-vulnerability-in-the-website)
- [NETGEAR RAX series authentication bypass in management service](https://junglewise.ai/threats/cve-2026-11731-an-authentication-bypass-vulnerability-in-the-listed-netgear-rax)
- [NETGEAR RAX series insufficient input validation in management UI](https://junglewise.ai/threats/cve-2026-9216-netgear-rax-series-insufficient-input-validation-in-management-ui)
- [NETGEAR Nighthawk and Orbi routers command injection vulnerability](https://junglewise.ai/threats/cve-2026-11814-netgear-nighthawk-and-orbi-routers-command-injection)
- [A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker…](https://junglewise.ai/threats/cve-2026-11739-a-command-injection-vulnerability-in-certain-affected-netgear)