CVE-2026-11735 PUBLISHED

Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models

Assigner: NETGEAR
Reserved: 09.06.2026 Published: 11.08.2026 Updated: 12.08.2026

A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.

Metrics

CVSS Vector: CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:Y/R:U/V:D/RE:L/U:Amber
CVSS Score: 1.9

Product Status

Vendor NETGEAR
Product R7000
Versions Default: affected
  • affected from 0 to * (excl.)
Vendor NETGEAR
Product RAX20
Versions Default: affected
  • affected from 0 to * (excl.)
Vendor NETGEAR
Product RAX35v2
Versions Default: unaffected
  • affected from 0 to V1.0.16.132 (excl.)
Vendor NETGEAR
Product RAX41
Versions Default: affected
  • affected from 0 to * (excl.)
Vendor NETGEAR
Product RAX41v2
Versions Default: unaffected
  • affected from 0 to V1.1.4.28 (excl.)
Vendor NETGEAR
Product RAX42
Versions Default: affected
  • affected from 0 to * (excl.)
Vendor NETGEAR
Product RAX42v2
Versions Default: unaffected
  • affected from 0 to V1.1.4.28 (excl.)
Vendor NETGEAR
Product RAX43
Versions Default: unaffected
  • affected from 0 to V1.0.16.132 (excl.)
Vendor NETGEAR
Product RAX43v2
Versions Default: unaffected
  • affected from 0 to V1.1.4.28 (excl.)
Vendor NETGEAR
Product RAX45
Versions Default: affected
  • affected from 0 to * (excl.)
Vendor NETGEAR
Product RAX49S
Versions Default: unaffected
  • affected from 0 to V1.1.4.28 (excl.)
Vendor NETGEAR
Product RAX50
Versions Default: unaffected
  • affected from 0 to V1.0.16.132 (excl.)
Vendor NETGEAR
Product RAX50S
Versions Default: unaffected
  • affected from 0 to V1.0.16.132 (excl.)
Vendor NETGEAR
Product RAX50v2
Versions Default: unaffected
  • affected from 0 to V1.1.4.28 (excl.)
Vendor NETGEAR
Product RAX54Sv2
Versions Default: unaffected
  • affected from 0 to V1.1.4.28 (excl.)
Vendor NETGEAR
Product RAX54v2
Versions Default: unaffected
  • affected from 0 to V1.1.4.28 (excl.)
Vendor NETGEAR
Product RAXE450
Versions Default: affected
  • affected from 0 to * (excl.)
Vendor NETGEAR
Product RAXE500
Versions Default: unaffected
  • affected from 0 to V1.2.14.114 (excl.)
Vendor NETGEAR
Product XR1000
Versions Default: unaffected
  • affected from 0 to V1.1.0.22 (excl.)
Vendor NETGEAR
Product XR1000v2
Versions Default: unaffected
  • affected from 0 to V1.1.0.22 (excl.)

Solutions

Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:

ProductFixed VersionR7000 (EoS) Nighthawk AC1900 Smart WiFi Dual Band Gigabit RouterEOSRAX20 (EoS) 4-Stream AX1800 WiFi 6 RouterEOSRAX35v2 Nighthawk AX4 4-Stream AX3000 WiFi 6 Router V1.0.16.132 https://www.netgear.com/support/product/rax35v2/ RAX41 (EoS) Nighthawk AX5 5-Stream AX3600 WiFi RouterEOSRAX41v2 Nighthawk AX5 5-Stream AX3600 WiFi Router V1.1.4.28 https://www.netgear.com/support/product/rax41v2/ RAX42 (EoS) Nighthawk AX5 5-Stream AX4200 WiFi RouterEOSRAX42v2 Nighthawk AX5 5-Stream AX4200 WiFi Router V1.1.4.28 https://www.netgear.com/support/product/rax42v2/ RAX43 Nighthawk AX5 5-Stream AX4200 WiFi Router V1.0.16.132 https://www.netgear.com/support/product/rax43/ RAX43v2 Nighthawk AX5 5-Stream AX4200 WiFi Router V1.1.4.28 https://www.netgear.com/support/product/rax43v2/ RAX45 (EoS) Nighthawk AX6 6-Stream AX4300 WiFi RouterEOSRAX49S Nighthawk AX6 6-Stream AX5300 WiFi Router V1.1.4.28 https://www.netgear.com/support/product/rax49s/ RAX50 Nighthawk AX6 6-Stream AX5400 WiFi 6 Router V1.0.16.132 https://www.netgear.com/support/product/rax50/ RAX50S (EoS) Nighthawk AX6 6-Stream AX5400 WiFi 6 Router V1.0.16.132 https://www.netgear.com/support/product/rax50s/ RAX50v2 Nighthawk AX6 6-Stream AX5400 WiFi 6 Router V1.1.4.28 https://www.netgear.com/support/product/rax50v2/ RAX54Sv2 Nighthawk AX6 6-Stream AX5400 WiFi Router V1.1.4.28 https://www.netgear.com/support/product/rax54sv2/ RAX54v2 Nighthawk AX6 6-Stream AX5400 WiFi RouterV1.1.4.28RAXE450 (EoS) Nighthawk AXE10000 Tri-Band WiFi 6E RouterEOSRAXE500 Nighthawk AX12 12-Stream AXE11000 Tri-Band WiFi 6E Router V1.2.14.114 https://www.netgear.com/support/product/raxe500/ XR1000 Nighthawk WiFi 6 Pro Gaming Router V1.1.0.22 https://www.netgear.com/support/product/xr1000/ XR1000v2 Nighthawk WiFi 6 Pro Gaming Router V1.1.0.22 https://www.netgear.com/support/product/xr1000v2/

Models marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.

Credits

  • SmallS finder

References

Problem Types

  • CWE-121 Stack-based buffer overflow CWE