CVE-2026-11734
Awaiting Analysis
Awaiting Analysis - Queue
Authenticated Admin Buffer Overflow in NETGEAR Devices Causes Denial of Service
Vulnerability report for CVE-2026-11734, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-08-11
Last updated on: 2026-09-09
Assigner: Netgear, Inc.
Description
Description
A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| netgear | mr70_firmware | to 1.0.4.48 (exc) |
| netgear | mr90_firmware | to 1.0.2.46 (exc) |
| netgear | ms70_firmware | to 1.0.4.48 (inc) |
| netgear | ms90_firmware | to 1.0.2.46 (exc) |
| netgear | rax41_firmware | to 1.1.6.36 (exc) |
| netgear | rax41v2_firmware | to 1.1.6.36 (exc) |
| netgear | rax42_firmware | to 1.1.6.36 (exc) |
| netgear | rax42v2_firmware | to 1.1.6.36 (exc) |
| netgear | rax43_firmware | to 1.1.6.36 (exc) |
| netgear | rax43v2_firmware | to 1.1.6.36 (exc) |
| netgear | rax49s_firmware | to 1.1.6.36 (exc) |
| netgear | rax50_firmware | to 1.1.6.36 (exc) |
| netgear | rax50v2_firmware | to 1.1.6.36 (exc) |
| netgear | rax54s_firmware | to 1.1.6.36 (exc) |
| netgear | rax54sv2_firmware | to 1.1.6.36 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-121 | A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). |
