CVE-2026-11739

UNKNOWN 0.0

Command injection vulnerability in some NETGEAR Nighthawk devices

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.

CWE	CWE-78
Vendor	netgear
Product	mr60
Published	Aug 11, 2026

Stay Ahead of the Next One

Get instant alerts for netgear mr60

Be the first to know when new unknown vulnerabilities affecting netgear mr60 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

NETGEAR / MR60

0 < V1.1.8.142

NETGEAR / MR70

0 < V1.0.4.48

NETGEAR / MR90

0 < V1.0.2.46

NETGEAR / MS60

0 < V1.1.8.142

NETGEAR / MS70

0 < V1.0.4.48

NETGEAR / MS90

0 < V1.0.2.46

NETGEAR / RAX20

0 < V1.0.17.142

NETGEAR / RAX200

0 < V1.0.11.148

NETGEAR / RAX35

0 < V1.0.17.142

NETGEAR / RAX35v2

0 < V1.0.17.142

NETGEAR / RAX41

0 < V1.1.6.36

NETGEAR / RAX41v2

0 < V1.1.6.36

NETGEAR / RAX42

0 < V1.1.6.36

NETGEAR / RAX42v2

0 < V1.1.6.36

NETGEAR / RAX43

0 < V1.1.6.36

NETGEAR / RAX43v2

0 < V1.1.6.36

NETGEAR / RAX45

0 < V1.0.17.142

NETGEAR / RAX49S

0 < V1.1.6.36

NETGEAR / RAX50

0 < V1.1.6.36

NETGEAR / RAX50v2

0 < V1.1.6.36

NETGEAR / RAX54S

0 < V1.1.6.36

NETGEAR / RAX54Sv2

0 < V1.1.6.36

NETGEAR / RAX80

0 < V1.0.11.148

NETGEAR / RAXE500

0 < V1.2.14.110

NETGEAR / RS700

0 < V1.0.9.6

NETGEAR / XR1000

0 < V1.1.0.22

NETGEAR / XR1000v2

0 < V1.1.0.22

References

NVD ↗ CVE.org ↗ EPSS Data ↗

Credits

fluorescent