CVE-2026-11735

Awaiting Analysis Awaiting Analysis - Queue

Authenticated Admin Stack-Based Buffer Overflow in NETGEAR Routers

Publication date: 2026-08-11

Last updated on: 2026-09-09

Assigner: Netgear, Inc.

Description

A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-09-09

Generated

2026-09-21

AI Q&A

2026-08-11

EPSS Evaluated

2026-09-15

NVD

CVE-2026-11735

EUVD

EUVD-2026-56194

Affected Vendors & Products

Vendor	Product	Version / Range
netgear	r7000_firmware	*
netgear	rax20_firmware	*
netgear	rax35v2_firmware	to 1.0.16.132 (exc)
netgear	rax41_firmware	*
netgear	rax41v2_firmware	to 1.1.4.28 (exc)
netgear	rax42_firmware	*
netgear	rax42v2_firmware	to 1.1.4.28 (exc)
netgear	rax43_firmware	to 1.0.16.132 (exc)
netgear	rax43v2_firmware	to 1.1.4.28 (exc)
netgear	rax45_firmware	*
netgear	rax49s_firmware	to 1.1.4.28 (exc)
netgear	rax50_firmware	to 1.0.16.132 (exc)
netgear	rax50s_firmware	to 1.0.16.132 (exc)
netgear	rax50v2_firmware	to 1.1.4.28 (exc)
netgear	rax54sv2_firmware	to 1.1.4.28 (exc)
netgear	rax54v2_firmware	to 1.1.4.28 (exc)
netgear	raxe450_firmware	*
netgear	raxe500_firmware	to 1.2.14.114 (exc)
netgear	xr1000_firmware	to 1.1.0.22 (exc)
netgear	xr1000v2_firmware	to 1.1.0.22 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This is a stack-based buffer overflow vulnerability in certain NETGEAR router models. It allows an authenticated admin user to execute unauthorized modifications to the router's software and functionality by exploiting a flaw in memory handling.

Detection Guidance

This vulnerability requires authenticated admin access to exploit, so detection should focus on monitoring for unauthorized changes to router software or functionality. Check for unexpected firmware updates or configuration modifications. Review logs for unusual admin activity or commands executed by authenticated users.

Impact Analysis

An attacker with admin access could potentially alter router settings, install malicious firmware, or disrupt network operations. This could lead to unauthorized access, data interception, or denial of service on the network.

Compliance Impact

The vulnerability allows an authenticated admin user to make unauthorized modifications to the router's software and functionality through a stack-based buffer overflow. This could potentially lead to unauthorized access or data exfiltration, which may impact compliance with standards like GDPR or HIPAA by compromising data integrity and confidentiality.

Mitigation Strategies

Immediately update NETGEAR router firmware to the latest version to patch the stack-based buffer overflow vulnerability. Restrict admin access to trusted users only and monitor network traffic for unusual activity.

Hi! I’m here to help you understand CVE-2026-11735. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70