CVE-2026-11731: Authentication Bypass Vulnerability in Certain NETGEAR RAX Series Models
Published Oct 13, 2026
·Updated
An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the confidentiality and integrity of management data and the availability of device-management functions.
Affected Software
1 affected component
Netgear RAX Series
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
NETGEAR RAX28, RAX29, and RAX30to a version that resolves this vulnerability.Fixed in v1.0.15.110
Event History
Oct 13, 2026
CVE Published
via MITRE·02:41 PM
Data Sourced
via MITRE·02:41 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeakness