CVE-2026-11734
Awaiting Analysis
Awaiting Analysis - Queue
Authenticated Admin Buffer Overflow in NETGEAR Devices Causes Denial of Service
Vulnerability report for CVE-2026-11734, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-08-11
Last updated on: 2026-08-28
Assigner: Netgear, Inc.
Description
Description
A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| netgear | nighthawk_rax41 | to 1.1.6.36 (inc) |
| netgear | nighthawk_rax41v2 | to 1.1.6.36 (inc) |
| netgear | nighthawk_rax42 | to 1.1.6.36 (inc) |
| netgear | nighthawk_rax42v2 | to 1.1.6.36 (inc) |
| netgear | nighthawk_rax43 | to 1.1.6.36 (inc) |
| netgear | nighthawk_rax43v2 | to 1.1.6.36 (inc) |
| netgear | nighthawk_rax49s | * |
| netgear | nighthawk_rax50 | * |
| netgear | nighthawk_rax50v2 | * |
| netgear | nighthawk_rax54s | * |
| netgear | nighthawk_rax54sv2 | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-121 | A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). |