CVE-2026-11732: Insufficient input validation vulnerability exists in website blocking feature of certain NETGEAR RAX/CAX series models
An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized commands on the router. This vulnerability could affect the confidentiality, integrity, and availability of the affected router. It applies only when the Block Sites feature is turned on.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
NETGEAR CAX30 Nighthawk AX6 6-Stream WiFi 6 Cable Modem Routerto a version that resolves this vulnerability.Fixed in V2.3.4.12 - Upgrade
Upgrade
NETGEAR RAX30 Nighthawk AX5 5-Stream AX2400 WiFi 6 Routerto a version that resolves this vulnerability.Fixed in V1.0.14.108 - Upgrade
Upgrade
NETGEAR RAX5 4-Stream AX1600 WiFi 6 Routerto a version that resolves this vulnerability.Fixed in V1.0.5.34 - Upgrade
Upgrade
NETGEAR RAXE300 Nighthawk AXE7800 Tri-Band WiFi 6E Routerto a version that resolves this vulnerability.Fixed in V1.0.10.72 - Compensating control
Retire NETGEAR devices marked (EoS) and upgrade to a newer NETGEAR device for continued security support.
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker must be network-adjacent and have network access to the router, such as valid Wi-Fi credentials. The provided information does not indicate that it can be exploited remotely from the internet without access to the local network.
Are routers affected when using the default configuration?
The vulnerability applies only when the Block Sites website-blocking feature is enabled. A router with Block Sites turned off is not affected by this issue as described.
What can an attacker do after exploitation?
A successful attacker can run unauthorized commands on the router. This could affect the router's confidentiality, integrity, and availability.
What mitigation is available if patching cannot be performed immediately?
Turn off the Block Sites feature. Also restrict access to the router's network, including limiting Wi-Fi credentials to trusted users, because exploitation requires network access.