CVE-2026-11732
Insufficient input validation vulnerability exists in website blocking feature of certain NETGEAR RAX/CAX series models
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized commands on the router. This vulnerability could affect the confidentiality, integrity, and availability of the affected router. It applies only when the Block Sites feature is turned on.
| CWE | CWE-20 |
| Vendor | netgear |
| Product | cax30 |
| Published | Oct 13, 2026 |
| Last Updated | Oct 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for netgear cax30
Be the first to know when new unknown vulnerabilities affecting netgear cax30 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
NETGEAR / CAX30
0 < V2.3.4.12
NETGEAR / RAX30
0 < V1.0.14.108
NETGEAR / RAX5
0 < V1.0.5.34
NETGEAR / RAXE300
0 < V1.0.10.72
References
Credits
kaoken