CVE-2026-11814

UNKNOWN 0.0

Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.

CWE	CWE-295
Vendor	netgear
Product	be9300
Published	Aug 11, 2026

Stay Ahead of the Next One

Get instant alerts for netgear be9300

Be the first to know when new unknown vulnerabilities affecting netgear be9300 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

NETGEAR / BE9300

0 < V1.0.1.84

NETGEAR / MR60

0 < V1.1.8.142

NETGEAR / MS60

0 < V1.1.8.142

NETGEAR / R6700AX

0 < V1.0.18.164

NETGEAR / RAX10

0 < V1.0.5.50

NETGEAR / RAX120

0 < V1.2.10.56

NETGEAR / RAX120v2

0 < V1.2.10.56

NETGEAR / RAX20

0 < V1.0.17.142

NETGEAR / RAX28

0 < V1.0.14.108

NETGEAR / RAX29

0 < V1.0.14.108

NETGEAR / RAX30

0 < V1.0.14.108

NETGEAR / RAX36S

0 < V1.0.5.50

NETGEAR / RAX43

0 < V1.0.17.142

NETGEAR / RAX45

0 < V1.0.17.142

NETGEAR / RAX50

0 < V1.0.17.142

NETGEAR / RAX70

0 < V1.0.19.172

NETGEAR / RBR760

0 < V6.3.8.11

NETGEAR / RBS760

0 < V6.3.8.11

NETGEAR / RS100

0 < V1.0.1.80

NETGEAR / RS200

0 < V1.0.1.90

NETGEAR / RS280

0 < V1.0.1.90

NETGEAR / RS300

0 < V1.0.1.90

NETGEAR / RS500

0 < V1.0.1.90

NETGEAR / RS600

0 < V1.0.1.90

NETGEAR / RS70

0 < V1.0.1.80

NETGEAR / RS90

0 < V1.0.1.80

References

NVD ↗ CVE.org ↗ EPSS Data ↗

Credits

nobodyisnobody