CVE-2026-11734: NETGEAR MR70 Firmware

Low severity, CVSS 2.7. EPSS: 0.6% chance of exploitation in the next 30 days.

A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.

Affected products

NETGEAR MR70 Firmware: before 1.0.4.48 (fixed in 1.0.4.48)
NETGEAR MR90 Firmware: before 1.0.2.46 (fixed in 1.0.2.46)
NETGEAR MS70 Firmware: up to and including 1.0.4.48
NETGEAR MS90 Firmware: before 1.0.2.46 (fixed in 1.0.2.46)
NETGEAR RAX41 Firmware: before 1.1.6.36 (fixed in 1.1.6.36)
NETGEAR RAX41V2 Firmware: before 1.1.6.36 (fixed in 1.1.6.36)
NETGEAR RAX42 Firmware: before 1.1.6.36 (fixed in 1.1.6.36)
NETGEAR RAX42V2 Firmware: before 1.1.6.36 (fixed in 1.1.6.36)
NETGEAR RAX43 Firmware: before 1.1.6.36 (fixed in 1.1.6.36)
NETGEAR RAX43V2 Firmware: before 1.1.6.36 (fixed in 1.1.6.36)
NETGEAR RAX49S Firmware: before 1.1.6.36 (fixed in 1.1.6.36)
NETGEAR RAX50 Firmware: before 1.1.6.36 (fixed in 1.1.6.36)
NETGEAR RAX50V2 Firmware: before 1.1.6.36 (fixed in 1.1.6.36)
NETGEAR RAX54S Firmware: before 1.1.6.36 (fixed in 1.1.6.36)
NETGEAR RAX54SV2 Firmware: before 1.1.6.36 (fixed in 1.1.6.36)

Published 2026-08-11. Last modified 2026-09-09.