Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-11814— Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers

Quick assessment

Affected

NETGEAR BE9300

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

NETGEAR BE9300是美国NETGEAR公司的一款无线路由器。 NETGEAR BE9300存在加密问题漏洞，该漏洞源于命令注入，可能导致网络邻近的攻击者通过拦截和修改本地网络流量的中间人攻击破坏受影响设备的机密性和完整性。

CVSS 4.9 · Medium EPSS 0.91% · P59 Updated Aug 12, 2026

Possible ATT&CK Techniques 2 AI

T1557 · Adversary-in-the-Middle T1190 · Exploit Public-Facing Application

Affected Version Matrix 26

Vendor	Product	Version Range	Status
NETGEAR	BE9300	`< V1.0.1.84`	affected
NETGEAR	MR60	`< V1.1.8.142`	affected
NETGEAR	MS60	`< V1.1.8.142`	affected
NETGEAR	R6700AX	`< V1.0.18.164`	affected
NETGEAR	RAX10	`< V1.0.5.50`	affected
NETGEAR	RAX120	`< V1.2.10.56`	affected
NETGEAR	RAX120v2	`< V1.2.10.56`	affected
NETGEAR	RAX20	`< V1.0.17.142`	affected
NETGEAR	RAX28	`< V1.0.14.108`	affected
NETGEAR	RAX29	`< V1.0.14.108`	affected
NETGEAR	RAX30	`< V1.0.14.108`	affected
NETGEAR	RAX36S	`< V1.0.5.50`	affected
NETGEAR	RAX43	`< V1.0.17.142`	affected
NETGEAR	RAX45	`< V1.0.17.142`	affected
NETGEAR	RAX50	`< V1.0.17.142`	affected
NETGEAR	RAX70	`< V1.0.19.172`	affected
NETGEAR	RBR760	`< V6.3.8.11`	affected
NETGEAR	RBS760	`< V6.3.8.11`	affected
NETGEAR	RS100	`< V1.0.1.80`	affected
NETGEAR	RS200	`< V1.0.1.90`	affected
NETGEAR	RS280	`< V1.0.1.90`	affected
NETGEAR	RS300	`< V1.0.1.90`	affected
NETGEAR	RS500	`< V1.0.1.90`	affected
NETGEAR	RS600	`< V1.0.1.90`	affected
NETGEAR	RS70	`< V1.0.1.80`	affected
NETGEAR	RS90	`< V1.0.1.80`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-11814

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers

Source: CVE Program / CVE List V5

Vulnerability Description

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:L/U:Amber

Source: CVE Program / CVE List V5

Vulnerability Type

证书验证不恰当

Source: CVE Program / CVE List V5

Vulnerability Title

NETGEAR BE9300 加密问题漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE
NETGEAR	BE9300	0 ~ V1.0.1.84	-
NETGEAR	MR60	0 ~ V1.1.8.142	-
NETGEAR	MS60	0 ~ V1.1.8.142	-
NETGEAR	R6700AX	0 ~ V1.0.18.164	-
NETGEAR	RAX10	0 ~ V1.0.5.50	-
NETGEAR	RAX120	0 ~ V1.2.10.56	-
NETGEAR	RAX120v2	0 ~ V1.2.10.56	-
NETGEAR	RAX20	0 ~ V1.0.17.142	-
NETGEAR	RAX28	0 ~ V1.0.14.108	-
NETGEAR	RAX29	0 ~ V1.0.14.108	-
NETGEAR	RAX30	0 ~ V1.0.14.108	-
NETGEAR	RAX36S	0 ~ V1.0.5.50	-
NETGEAR	RAX43	0 ~ V1.0.17.142	-
NETGEAR	RAX45	0 ~ V1.0.17.142	-
NETGEAR	RAX50	0 ~ V1.0.17.142	-
NETGEAR	RAX70	0 ~ V1.0.19.172	-
NETGEAR	RBR760	0 ~ V6.3.8.11	-
NETGEAR	RBS760	0 ~ V6.3.8.11	-
NETGEAR	RS100	0 ~ V1.0.1.80	-
NETGEAR	RS200	0 ~ V1.0.1.90	-
NETGEAR	RS280	0 ~ V1.0.1.90	-
NETGEAR	RS300	0 ~ V1.0.1.90	-
NETGEAR	RS500	0 ~ V1.0.1.90	-
NETGEAR	RS600	0 ~ V1.0.1.90	-
NETGEAR	RS70	0 ~ V1.0.1.80	-
NETGEAR	RS90	0 ~ V1.0.1.80	-

II. Public POCs for CVE-2026-11814

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-11814

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-11814 (1)

🔗 August 2026 NETGEAR Security Advisory - NETGEAR Support Read full article vendor-advisory patch

Vendor Pages for CVE-2026-11814 (26)

🔗 https://www.netgear.com/support/product/rs200/ Read full article product patch
🔗 RAX50 | Nighthawk AX6 6-Stream AX5400 WiFi 6 Router product patch
🔗 RAX28 | Nighthawk AX5 5-Stream AX2200 WiFi 6 Router product patch
🔗 RAX29 | Nighthawk AX2400 WiFi 6 Router product patch
🔗 RBS760 | Orbi Tri-Band Mesh WiFi 6 Add-on Satellite product patch
🔗 RS300 | Nighthawk BE9300 WiFi 7 Tri-Band Router product patch
🔗 RAX36S | Nighthawk AX4 4-Stream AX3000 WiFi Router product patch
🔗 RS500 | Nighthawk BE12000 WiFi 7 Tri-Band Router product patch
🔗 RAX43 | Nighthawk AX5 5-Stream AX4200 WiFi Router product patch
🔗 MS60 | Nighthawk Mesh WiFi 6 Add-on Satellite product patch
🔗 RS100 | Nighthawk WiFi 7 Dual-Band Router product patch
🔗 RAX120 | Nighthawk AX12 12-Stream WiFi Router product patch
🔗 RS90 | Nighthawk WiFi 7 Dual-Band Router product patch
🔗 RS70 | Nighthawk WiFi 7 Dual-Band Router product patch
🔗 RAX120v2 | Nighthawk AX12 12-Stream AX6000 WiFi Router product patch
🔗 RBR760 | Orbi Tri-Band Mesh WiFi 6 Router product patch
🔗 RAX10 | 4-Stream AX1800 WiFi 6 Router product patch
🔗 Product Detail product patch
🔗 RS600 | Nighthawk BE18000 WiFi 7 Tri-Band Router product patch
🔗 RAX30 | Nighthawk AX5 5-Stream AX2400 WiFi 6 Router product patch
🔗 R6700AX | 4-Stream AX1800 WiFi 6 Router product patch
🔗 RS280 | Nighthawk BE9200 WiFi 7 Tri-Band Router product patch
🔗 BE9300 | Nighthawk WiFi 7 Tri-Band Router product patch
🔗 RAX45 | Nighthawk AX6 6-Stream AX4300 WiFi Router product patch
🔗 RAX20 | 4-Stream AX1800 WiFi 6 Router product patch
🔗 MR60 | Nighthawk Mesh WiFi 6 Router product patch

https://www.cve.org/CVERecord?id=CVE-2026-11814

Same Patch Batch · NETGEAR · 2026-08-11 · 9 CVEs total

CVE-2026-11739	4.9 MEDIUM	Command injection vulnerability in some NETGEAR Nighthawk devices
CVE-2026-11737	4.3 MEDIUM	Some NETGEAR Nighthawk devices allow administrators to tamper with the device
CVE-2026-11738	4.3 MEDIUM	Insufficient input validation in certain NETGEAR Nighthawk routers allows administrators t
CVE-2026-9214	4.3 MEDIUM	Insufficient input validation in NETGEAR R7000 router allows administrators to tamper with
CVE-2026-11735	1.9 LOW	Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models
CVE-2026-11736	1.9 LOW	Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers
CVE-2026-11734	1.1 LOW	Device administrator can interrupt the normal operation of some NETGEAR Nighthawk devices.
CVE-2026-11733	1.1 LOW	Buffer overflow vulnerability in some NETGEAR Nighthawk routers

IV. Related Vulnerabilities

Same product: BE9300

CVE-2026-19982
GL.iNet BE9300/MT6000 Firewall-management RPC os command inj

Same vendor: NETGEAR

Same weakness: CWE-295

V. Comments for CVE-2026-11814

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-11814— Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers

Quick assessment

Possible ATT&CK Techniques 2 AI

Affected Version Matrix 26

I. Basic Information for CVE-2026-11814

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2026-11814

III. Intelligence Information for CVE-2026-11814

Vendor Advisories for CVE-2026-11814 (1)

Vendor Pages for CVE-2026-11814 (26)

Same Patch Batch · NETGEAR · 2026-08-11 · 9 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2026-11814

Leave a comment