CVE-2026-11731 PUBLISHED

Authentication Bypass Vulnerability in Certain NETGEAR RAX Series Models

Assigner: NETGEAR
Reserved: 09.06.2026 Published: 13.10.2026 Updated: 13.10.2026

An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the confidentiality and integrity of management data and the availability of device-management functions.

Metrics

CVSS Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:Y/V:D/U:Amber
CVSS Score: 6.3

Product Status

Vendor NETGEAR
Product RAX30
Versions Default: unaffected
  • affected from 0 to v1.0.15.110 (excl.)
Vendor NETGEAR
Product RAX29
Versions Default: unaffected
  • affected from 0 to v1.0.15.110 (excl.)
Vendor NETGEAR
Product RAX28
Versions Default: unaffected
  • affected from 0 to v1.0.15.110 (excl.)

Solutions

Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:

ProductFixed VersionRAX28 Nighthawk AX5 5-Stream AX2200 WiFi 6 Router v1.0.15.110 https://www.netgear.com/support/product/rax28 RAX29 Nighthawk AX2400 WiFi 6 Router v1.0.15.110 https://www.netgear.com/support/product/rax29 RAX30 Nighthawk AX5 5-Stream AX2400 WiFi 6 Router v1.0.15.110 https://www.netgear.com/support/product/rax30

Credits

  • Yanming Chen of Guangzhou University finder
  • Michael Gentile finder

References

Problem Types

  • CWE-288 Authentication bypass using an alternate path or channel CWE

Impacts

  • CAPEC-115 Authentication Bypass