CVE-2026-11733

Awaiting Analysis Awaiting Analysis - Queue

Buffer Overflow in NETGEAR Router Firmware

Publication date: 2026-08-11

Last updated on: 2026-09-09

Assigner: Netgear, Inc.

Description

A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-09-09

Generated

2026-09-21

AI Q&A

2026-08-11

EPSS Evaluated

2026-09-15

NVD

CVE-2026-11733

EUVD

EUVD-2026-56190

Affected Vendors & Products

Vendor	Product	Version / Range
netgear	rax41_firmware	to 1.1.6.36 (exc)
netgear	rax41v2_firmware	to 1.1.6.36 (exc)
netgear	rax42_firmware	to 1.1.6.36 (exc)
netgear	rax42v2_firmware	to 1.1.6.36 (exc)
netgear	rax43_firmware	to 1.1.6.36 (exc)
netgear	rax43v2_firmware	to 1.1.6.36 (exc)
netgear	rax49s_firmware	to 1.1.6.36 (exc)
netgear	rax50_firmware	to 1.1.6.36 (exc)
netgear	rax50v2_firmware	to 1.1.6.36 (exc)
netgear	rax54s_firmware	to 1.1.6.36 (exc)
netgear	rax54sv2_firmware	to 1.1.6.36 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This vulnerability is a buffer overflow issue in certain NETGEAR devices. It allows a device administrator to temporarily disrupt normal device operations.

Detection Guidance

This vulnerability is specific to NETGEAR models and requires administrative access to trigger a temporary interruption. Detection may involve monitoring device logs for unusual activity or crashes after administrative actions. No direct commands are provided in the context.

Impact Analysis

An attacker with administrative access could cause the device to malfunction, leading to temporary service interruption or instability.

Compliance Impact

The provided CVE data does not specify how this vulnerability impacts compliance with standards like GDPR or HIPAA. The vulnerability involves a buffer overflow that may disrupt device operation, but no direct compliance implications are mentioned.

Mitigation Strategies

Update the firmware of affected NETGEAR devices to the latest version provided by the vendor to address the buffer overflow vulnerability.

Hi! I’m here to help you understand CVE-2026-11733. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70