CVE-2026-11735: NETGEAR r7000 Firmware

Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days.

A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.

Affected products

NETGEAR r7000 Firmware: affected versions not specified
NETGEAR RAX20 Firmware: affected versions not specified
NETGEAR RAX35V2 Firmware: before 1.0.16.132 (fixed in 1.0.16.132)
NETGEAR RAX41 Firmware: affected versions not specified
NETGEAR RAX41V2 Firmware: before 1.1.4.28 (fixed in 1.1.4.28)
NETGEAR RAX42 Firmware: affected versions not specified
NETGEAR RAX42V2 Firmware: before 1.1.4.28 (fixed in 1.1.4.28)
NETGEAR RAX43 Firmware: before 1.0.16.132 (fixed in 1.0.16.132)
NETGEAR RAX43V2 Firmware: before 1.1.4.28 (fixed in 1.1.4.28)
NETGEAR RAX45 Firmware: affected versions not specified
NETGEAR RAX49S Firmware: before 1.1.4.28 (fixed in 1.1.4.28)
NETGEAR RAX50 Firmware: before 1.0.16.132 (fixed in 1.0.16.132)
NETGEAR RAX50S Firmware: before 1.0.16.132 (fixed in 1.0.16.132)
NETGEAR RAX50V2 Firmware: before 1.1.4.28 (fixed in 1.1.4.28)
NETGEAR RAX54SV2 Firmware: before 1.1.4.28 (fixed in 1.1.4.28)
NETGEAR RAX54V2 Firmware: before 1.1.4.28 (fixed in 1.1.4.28)
NETGEAR RAXE450 Firmware: affected versions not specified
NETGEAR RAXE500 Firmware: before 1.2.14.114 (fixed in 1.2.14.114)
NETGEAR XR1000 Firmware: before 1.1.0.22 (fixed in 1.1.0.22)
NETGEAR XR1000V2 Firmware: before 1.1.0.22 (fixed in 1.1.0.22)

Published 2026-08-11. Last modified 2026-09-09.