# CVE-2026-11739: A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker… Source: https://junglewise.ai/threats/cve-2026-11739-a-command-injection-vulnerability-in-certain-affected-netgear Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Published: 2026-08-11 License: CC BY 4.0 with a link back CVE-2026-11739 · Severity: medium · CVSS 6.4 · Published 2026-08-11 A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device. Technologies: [NETGEAR MR60](https://junglewise.ai/threats/technologies/mr60), [NETGEAR Mr60 Firmware](https://junglewise.ai/threats/technologies/mr60-firmware), [NETGEAR MR70](https://junglewise.ai/threats/technologies/mr70), [NETGEAR MS60](https://junglewise.ai/threats/technologies/ms60), [NETGEAR Ms60 Firmware](https://junglewise.ai/threats/technologies/ms60-firmware), [NETGEAR MS70](https://junglewise.ai/threats/technologies/ms70), [NETGEAR RAX20](https://junglewise.ai/threats/technologies/rax20), [NETGEAR Rax20 Firmware](https://junglewise.ai/threats/technologies/rax20-firmware), [NETGEAR RAX35v2](https://junglewise.ai/threats/technologies/rax35v2), [NETGEAR RAX41](https://junglewise.ai/threats/technologies/rax41), [NETGEAR Rax41 Firmware](https://junglewise.ai/threats/technologies/rax41-firmware), [NETGEAR RAX41v2](https://junglewise.ai/threats/technologies/rax41v2), [NETGEAR Rax41v2 Firmware](https://junglewise.ai/threats/technologies/rax41v2-firmware), [NETGEAR RAX42](https://junglewise.ai/threats/technologies/rax42), [NETGEAR Rax42 Firmware](https://junglewise.ai/threats/technologies/rax42-firmware), [NETGEAR RAX42v2](https://junglewise.ai/threats/technologies/rax42v2), [NETGEAR Rax42v2 Firmware](https://junglewise.ai/threats/technologies/rax42v2-firmware), [NETGEAR RAX43](https://junglewise.ai/threats/technologies/rax43), [NETGEAR Rax43 Firmware](https://junglewise.ai/threats/technologies/rax43-firmware), [NETGEAR RAX43v2](https://junglewise.ai/threats/technologies/rax43v2), [NETGEAR Rax43v2 Firmware](https://junglewise.ai/threats/technologies/rax43v2-firmware), [NETGEAR RAX45](https://junglewise.ai/threats/technologies/rax45), [NETGEAR Rax45 Firmware](https://junglewise.ai/threats/technologies/rax45-firmware), [NETGEAR RAX49s](https://junglewise.ai/threats/technologies/rax49s), [NETGEAR Rax49s Firmware](https://junglewise.ai/threats/technologies/rax49s-firmware), [NETGEAR RAX50](https://junglewise.ai/threats/technologies/rax50), [NETGEAR Rax50 Firmware](https://junglewise.ai/threats/technologies/rax50-firmware), [NETGEAR RAX50v2](https://junglewise.ai/threats/technologies/rax50v2), [NETGEAR Rax50v2 Firmware](https://junglewise.ai/threats/technologies/rax50v2-firmware), [NETGEAR RAX54S](https://junglewise.ai/threats/technologies/rax54s), [NETGEAR Rax54s Firmware](https://junglewise.ai/threats/technologies/rax54s-firmware), [NETGEAR RAX54sv2](https://junglewise.ai/threats/technologies/rax54sv2), [NETGEAR Rax54sv2 Firmware](https://junglewise.ai/threats/technologies/rax54sv2-firmware), [NETGEAR RAXE500](https://junglewise.ai/threats/technologies/raxe500), [NETGEAR RS700](https://junglewise.ai/threats/technologies/rs700), [NETGEAR XR1000](https://junglewise.ai/threats/technologies/xr1000), [NETGEAR XR1000v2](https://junglewise.ai/threats/technologies/xr1000v2). Vendors: [NETGEAR](https://junglewise.ai/threats/vendors/netgear). ## Quick answers **Is CVE-2026-11739 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-11739 being exploited in the wild. **How severe is CVE-2026-11739?** Medium severity, with a CVSS score of 6.4, published 11 August 2026. **Which products and versions are affected?** NETGEAR MR60, NETGEAR Mr60 Firmware, NETGEAR MR70, NETGEAR Mr70 Firmware and 50 more. The advisory does not name versions. **Is there a fix for CVE-2026-11739?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it. **Am I affected by CVE-2026-11739?** Check whether you run NETGEAR MR60, NETGEAR Mr60 Firmware, NETGEAR MR70 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you. ## Affected products - NETGEAR MR60 - NETGEAR Mr60 Firmware - NETGEAR MR70 - NETGEAR Mr70 Firmware - NETGEAR Mr90 - NETGEAR Mr90 Firmware - NETGEAR MS60 - NETGEAR Ms60 Firmware - NETGEAR MS70 - NETGEAR Ms70 Firmware - NETGEAR Ms90 - NETGEAR Ms90 Firmware - NETGEAR RAX20 - NETGEAR Rax20 Firmware - NETGEAR RAX200 - NETGEAR Rax200 Firmware - NETGEAR Rax35 - NETGEAR Rax35 Firmware - NETGEAR RAX35v2 - NETGEAR Rax35v2 Firmware - NETGEAR RAX41 - NETGEAR Rax41 Firmware - NETGEAR RAX41v2 - NETGEAR Rax41v2 Firmware - NETGEAR RAX42 - NETGEAR Rax42 Firmware - NETGEAR RAX42v2 - NETGEAR Rax42v2 Firmware - NETGEAR RAX43 - NETGEAR Rax43 Firmware - NETGEAR RAX43v2 - NETGEAR Rax43v2 Firmware - NETGEAR RAX45 - NETGEAR Rax45 Firmware - NETGEAR RAX49s - NETGEAR Rax49s Firmware - NETGEAR RAX50 - NETGEAR Rax50 Firmware - NETGEAR RAX50v2 - NETGEAR Rax50v2 Firmware - NETGEAR RAX54S - NETGEAR Rax54s Firmware - NETGEAR RAX54sv2 - NETGEAR Rax54sv2 Firmware - NETGEAR RAX80 - NETGEAR Rax80 Firmware - NETGEAR RAXE500 - NETGEAR Raxe500 Firmware - NETGEAR RS700 - NETGEAR Rs700 Firmware - NETGEAR XR1000 - NETGEAR Xr1000 Firmware - NETGEAR XR1000v2 - NETGEAR Xr1000v2 Firmware ## Related threats - [NETGEAR RAX series insufficient input validation in management UI](https://junglewise.ai/threats/cve-2026-9216-netgear-rax-series-insufficient-input-validation-in-management-ui) - [NETGEAR XR gaming routers CSRF vulnerability](https://junglewise.ai/threats/cve-2026-9215-netgear-xr-gaming-routers-csrf-vulnerability) - [NETGEAR Nighthawk and Orbi routers command injection vulnerability](https://junglewise.ai/threats/cve-2026-11814-netgear-nighthawk-and-orbi-routers-command-injection) - [Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected…](https://junglewise.ai/threats/cve-2026-11738-insufficient-input-validation-vulnerability-in-the-listed-netgear) - [Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected…](https://junglewise.ai/threats/cve-2026-11737-insufficient-input-validation-vulnerability-in-the-listed-netgear)