CVE-2026-11733

MediumCVSS 4.9/10Last modified Oct 23, 2026

Description

A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-121

Affected software

Vendor	Product	Versions
NETGEAR	RAX41	< V1.1.6.36
NETGEAR	RAX41v2	< V1.1.6.36
NETGEAR	RAX42	< V1.1.6.36
NETGEAR	RAX42v2	< V1.1.6.36
NETGEAR	RAX43	< V1.1.6.36
NETGEAR	RAX43v2	< V1.1.6.36
NETGEAR	RAX49S	< V1.1.6.36
NETGEAR	RAX50	< V1.1.6.36
NETGEAR	RAX50v2	< V1.1.6.36
NETGEAR	RAX54S	< V1.1.6.36
NETGEAR	RAX54Sv2	< V1.1.6.36

References

https://kb.netgear.com/000070887/August-2026-NETGEAR-Security-AdvisoryVendor Advisory
https://www.netgear.com/support/product/rax41/Product
https://www.netgear.com/support/product/rax41v2/Product
https://www.netgear.com/support/product/rax42/Product
https://www.netgear.com/support/product/rax42v2/Product
https://www.netgear.com/support/product/rax43/Product
https://www.netgear.com/support/product/rax43v2/Product
https://www.netgear.com/support/product/rax49s/Product
https://www.netgear.com/support/product/rax50/Product
https://www.netgear.com/support/product/rax50v2/Product

Timeline

Published: Aug 11, 2026
Last modified: Oct 23, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-117342.7A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become tempo CVE-2026-1173417.7In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event log. When the invitation is CVE-2026-1173467.5Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit CVE-2026-1173495.3Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.CVE-2026-117354.9A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modi CVE-2026-1173506.5Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.CVE-2026-117364.9A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modific CVE-2026-117374.5Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local networ CVE-2026-117373Janus WebRTC Server 1.2.3 through 1.4.0 is vulnerable to Directory Traversal. The application accepts a caller supplied media path when an o CVE-2026-117384.4Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network CVE-2026-117396.4A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to inte CVE-2026-11747.5A vulnerability was determined in birkir prime up to 0.4.0.beta.0. This affects an unknown function of the file /graphql of the component Gr