CVE-2026-11734: Device administrator can interrupt the normal operation of some NETGEAR Nighthawk devices.
A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
NETGEAR MR70 (Nighthawk Mesh WiFi 6 Router)to a version that resolves this vulnerability.Fixed in V1.0.4.48 - Upgrade
Upgrade
NETGEAR MR90 (Nighthawk Tri-band Mesh WiFi 6E Router)to a version that resolves this vulnerability.Fixed in V1.0.2.46 - Upgrade
Upgrade
NETGEAR MS70 (Nighthawk Mesh WiFi 6 Add-on Satellite)to a version that resolves this vulnerability.Fixed in V1.0.4.48 - Upgrade
Upgrade
NETGEAR MS90 (Nighthawk Tri-band Mesh WiFi 6E Add-on Satellite)to a version that resolves this vulnerability.Fixed in V1.0.2.46 - Upgrade
Upgrade
NETGEAR RAX41 (Nighthawk AX5 5-Stream AX3600 WiFi Router)to a version that resolves this vulnerability.Fixed in V1.1.6.36 - Upgrade
Upgrade
NETGEAR RAX41v2 (Nighthawk AX5 5-Stream AX3600 WiFi Router)to a version that resolves this vulnerability.Fixed in V1.1.6.36 - Upgrade
Upgrade
NETGEAR RAX42 (EoS) (Nighthawk AX5 5-Stream AX4200 WiFi Router)to a version that resolves this vulnerability.Fixed in V1.1.6.36 - Upgrade
Upgrade
NETGEAR RAX42v2 (Nighthawk AX5 5-Stream AX4200 WiFi Router)to a version that resolves this vulnerability.Fixed in V1.1.6.36 - Upgrade
Upgrade
NETGEAR RAX43 (Nighthawk AX5 5-Stream AX4200 WiFi Router)to a version that resolves this vulnerability.Fixed in V1.1.6.36 - Upgrade
Upgrade
NETGEAR RAX43v2 (Nighthawk AX5 5-Stream AX4200 WiFi Router)to a version that resolves this vulnerability.Fixed in V1.1.6.36 - Upgrade
Upgrade
NETGEAR RAX49S (Nighthawk AX6 6-Stream AX5300 WiFi Router)to a version that resolves this vulnerability.Fixed in V1.1.6.36 - Upgrade
Upgrade
NETGEAR RAX50 (Nighthawk AX6 6-Stream AX5400 WiFi 6 Router)to a version that resolves this vulnerability.Fixed in V1.1.6.36 - Upgrade
Upgrade
NETGEAR RAX50v2 (Nighthawk AX6 6-Stream AX5400 WiFi 6 Router)to a version that resolves this vulnerability.Fixed in V1.1.6.36 - Upgrade
Upgrade
NETGEAR RAX54S (Nighthawk AX6 6-Stream AX5400 WiFi Router)to a version that resolves this vulnerability.Fixed in V1.1.6.36 - Upgrade
Upgrade
NETGEAR RAX54Sv2 (Nighthawk AX6 6-Stream AX5400 WiFi Router)to a version that resolves this vulnerability.Fixed in V1.1.6.36 - Compensating control
For models marked (EoS) (MR70, RAX41, RAX42), retire these devices and upgrade to a newer NETGEAR device for continued security support (no security updates are planned).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-11734?
CVE-2026-11734 has a risk rating of 21, indicating a critical vulnerability.
How do I fix CVE-2026-11734?
To mitigate CVE-2026-11734, ensure that your NETGEAR Nighthawk device firmware is updated to the latest version provided by NETGEAR.
Which devices are affected by CVE-2026-11734?
CVE-2026-11734 affects specific NETGEAR Nighthawk models, including MR70, MR90, and MS90.
What is the impact of CVE-2026-11734?
The impact of CVE-2026-11734 is that an authenticated administrator can induce a buffer overflow, causing the device to become temporarily unavailable.
When was CVE-2026-11734 published?
CVE-2026-11734 was published on August 11, 2026.