CVE-2026-11731— Authentication Bypass Vulnerability in Certain NETGEAR RAX Series Models
Quick assessment
Affected
NETGEAR RAX30
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在所列 NETGEAR RAX 系列型号中存在一种身份验证绕过漏洞，允许具有邻近访问权限且未经身份验证的攻击者访问受影响设备管理服务的部分设备信息或修改管理员设置。该漏洞可能影响管理数据的机密性和完整性，以及设备管理功能的可用性。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-11731
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Authentication Bypass Vulnerability in Certain NETGEAR RAX Series Models
Source: CVE Program / CVE List V5
Vulnerability Description
An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the confidentiality and integrity of management data and the availability of device-management functions.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
使用候选路径或通道进行的认证绕过
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-11731
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-11731
请登录查看更多情报信息。
Same Patch Batch · NETGEAR · 2026-10-13 · 6 CVEs total
| CVE-2026-11732 | 8.8 HIGH | Insufficient input validation vulnerability exists in website blocking feature of certain |
| CVE-2026-11730 | 5.4 MEDIUM | Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models |
| CVE-2026-9218 | 4.5 MEDIUM | Insufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized |
| CVE-2026-107917 | 4.5 MEDIUM | Insufficient input validation vulnerability in NETGEAR R7300 router |
| CVE-2026-107918 | 4.5 MEDIUM | Insufficient input validation vulnerability in NETGEAR R7300 |
IV. Related Vulnerabilities
Same product: RAX30
-
CVE-2026-9216
Insufficient input validation vulnerability exists in certai -
CVE-2025-12943
Improper certificate validation in firmware update logic in -
CVE-2023-51635
NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Co -
CVE-2023-51634
NETGEAR RAX30 Improper Certificate Validation Remote Code Ex -
CVE-2023-40480
NETGEAR RAX30 DHCP Server Command Injection Remote Code Exec
Same vendor: NETGEAR
-
CVE-2026-107918
Insufficient input validation vulnerability in NETGEAR R7300 -
CVE-2026-107917
Insufficient input validation vulnerability in NETGEAR R7300 -
CVE-2026-11732
Insufficient input validation vulnerability exists in websit -
CVE-2026-11730
Insufficient session randomness vulnerability exists in cert -
CVE-2026-9218
Insufficient input validation vulnerability in Certain NETGE
Same weakness: CWE-288
-
CVE-2026-110130
Dockhand before 1.0.45 Authentication Bypass via Static-Asse -
CVE-2026-85865
Windows DHCP Server Security Feature Bypass Vulnerability -
CVE-2026-83787
Windows DHCP Server Security Feature Bypass Vulnerability -
CVE-2026-19620
IBM Planning Analytics Local is affected by security vulnera -
CVE-2026-19622
IBM Planning Analytics Local is affected by security vulnera
V. Comments for CVE-2026-11731
No comments yet