CVE-2026-11814: NETGEAR Nighthawk and Orbi routers command injection vulnerability

CVE-2026-11814 · Severity: medium · CVSS 6.8 · Published 2026-08-11

NETGEAR Nighthawk and Orbi WiFi routers contain a command injection vulnerability that allows an attacker positioned on the local network (able to intercept traffic) to execute arbitrary commands on the device. This could compromise the confidentiality and integrity of the router and any devices connected to it, potentially exposing sensitive network data or allowing an attacker to maintain persistent access to the home or office network.

Technologies: NETGEAR MR60, NETGEAR Mr60 Firmware, NETGEAR MS60, NETGEAR Ms60 Firmware, NETGEAR RAX20, NETGEAR Rax20 Firmware, NETGEAR Rax28, NETGEAR Rax29, NETGEAR RAX30, NETGEAR Rax30 Firmware, NETGEAR RAX43, NETGEAR Rax43 Firmware, NETGEAR RAX45, NETGEAR Rax45 Firmware, NETGEAR RAX50, NETGEAR Rax50 Firmware. Vendors: NETGEAR.

Quick answers

Is CVE-2026-11814 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-11814 being exploited in the wild.
How severe is CVE-2026-11814?
Medium severity, with a CVSS score of 6.8, published 11 August 2026.
Which products and versions are affected?
NETGEAR Be9300 prior to V1.0.1.84; NETGEAR MR60 prior to V1.1.8.142; NETGEAR MS60 prior to V1.1.8.142; NETGEAR R6700ax prior to V1.0.18.164; and 22 more.
Is there a fix for CVE-2026-11814?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-11814 attacked?
It is attacked from the adjacent network, in a network appliance.
Am I affected by CVE-2026-11814?
Check whether you run NETGEAR Be9300, NETGEAR Be9300 Firmware, NETGEAR MR60 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This is a command injection vulnerability affecting multiple NETGEAR Nighthawk and Orbi router models. The vulnerability requires the attacker to be network-adjacent with the ability to intercept and modify local network traffic (man-in-the-middle position). The attack allows an unauthenticated attacker to inject and execute arbitrary commands on the affected device, compromising both confidentiality and integrity. The issue is limited to certain region-specific SKUs. Patches are available via firmware updates for all affected models, with specific patched versions provided by NETGEAR.

Affected products

  • NETGEAR BE9300 prior to V1.0.1.84
  • NETGEAR MR60 prior to V1.1.8.142
  • NETGEAR MS60 prior to V1.1.8.142
  • NETGEAR R6700AX prior to V1.0.18.164
  • NETGEAR RAX10 prior to V1.0.5.50
  • NETGEAR RAX120 prior to V1.2.10.56
  • NETGEAR RAX120v2 prior to V1.2.10.56
  • NETGEAR RAX20 prior to V1.0.17.142
  • NETGEAR RAX28 prior to V1.0.14.108
  • NETGEAR RAX29 prior to V1.0.14.108
  • NETGEAR RAX30 prior to V1.0.14.108
  • NETGEAR RAX36S prior to V1.0.5.50
  • NETGEAR RAX43 prior to V1.0.17.142
  • NETGEAR RAX45 prior to V1.0.17.142
  • NETGEAR RAX50 prior to V1.0.17.142
  • NETGEAR RAX70 prior to V1.0.19.172
  • NETGEAR RBR760 prior to V6.3.8.11
  • NETGEAR RBS760 prior to V6.3.8.11
  • NETGEAR RS100 prior to V1.0.1.80
  • NETGEAR RS200 prior to V1.0.1.90
  • NETGEAR RS280 prior to V1.0.1.90
  • NETGEAR RS300 prior to V1.0.1.90
  • NETGEAR RS500 prior to V1.0.1.90
  • NETGEAR RS600 prior to V1.0.1.90
  • NETGEAR RS70 prior to V1.0.1.80
  • NETGEAR RS90 prior to V1.0.1.80

Timeline

  • 2026-08-11: disclosed
  • other: CVE-2026-11814 assigned

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.