CVE-2026-11735: Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models

Published Aug 11, 2026

Updated

A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.

Affected Software

1 affected component

Netgear NETGEAR Nighthawk models

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade NETGEAR Nighthawk routers (RAX35v2, RAX41v2, RAX42v2, RAX49S, RAX50v2, RAX54Sv2, RAXE500, XR1000, XR1000v2) to a version that resolves this vulnerability.
Fixed in 1.1.4.28
Upgrade
Upgrade NETGEAR Nighthawk routers (RAX35v2, RAX41, RAX42, RAX43, RAX50, RAX50S, RAX54v2, RAXE500) to a version that resolves this vulnerability.
Fixed in 1.1.4.28
Upgrade
Upgrade NETGEAR Nighthawk RAX35v2 to a version that resolves this vulnerability.
Fixed in 1.0.16.132
Upgrade
Upgrade NETGEAR Nighthawk RAX41v2 to a version that resolves this vulnerability.
Fixed in 1.1.4.28
Upgrade
Upgrade NETGEAR Nighthawk RAX42v2 to a version that resolves this vulnerability.
Fixed in 1.1.4.28
Upgrade
Upgrade NETGEAR Nighthawk RAX43 to a version that resolves this vulnerability.
Fixed in 1.0.16.132
Upgrade
Upgrade NETGEAR Nighthawk RAX43v2 to a version that resolves this vulnerability.
Fixed in 1.1.4.28
Upgrade
Upgrade NETGEAR Nighthawk RAX45 to a version that resolves this vulnerability.
Fixed in 1.1.4.28
Upgrade
Upgrade NETGEAR Nighthawk RAX49S to a version that resolves this vulnerability.
Fixed in 1.1.4.28
Upgrade
Upgrade NETGEAR Nighthawk RAX50 to a version that resolves this vulnerability.
Fixed in 1.0.16.132
Upgrade
Upgrade NETGEAR Nighthawk RAX50S to a version that resolves this vulnerability.
Fixed in 1.0.16.132
Upgrade
Upgrade NETGEAR Nighthawk RAX50v2 to a version that resolves this vulnerability.
Fixed in 1.1.4.28
Upgrade
Upgrade NETGEAR Nighthawk RAX54Sv2 to a version that resolves this vulnerability.
Fixed in 1.1.4.28
Upgrade
Upgrade NETGEAR Nighthawk RAX54v2 to a version that resolves this vulnerability.
Fixed in 1.1.4.28
Upgrade
Upgrade NETGEAR Nighthawk RAXE500 to a version that resolves this vulnerability.
Fixed in 1.2.14.114
Upgrade
Upgrade NETGEAR Nighthawk XR1000 to a version that resolves this vulnerability.
Fixed in 1.1.0.22
Upgrade
Upgrade NETGEAR Nighthawk XR1000v2 to a version that resolves this vulnerability.
Fixed in 1.1.0.22
Compensating control
For models marked (EoS) — R7000, RAX20, RAX35v2, RAX41 (EoS), RAX42 (EoS), RAX45 (EoS), RAX50S (EoS), RAXE450 (EoS) — retire these devices and upgrade to a newer NETGEAR device for continued security support.

Event History

Aug 11, 2026

CVE Published

via MITRE·03:06 PM

Data Sourced

via MITRE·03:06 PM

RemedyDescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2026-11735?

The severity of CVE-2026-11735 is rated as 50, indicating a moderate risk level.

How do I fix CVE-2026-11735?

To fix CVE-2026-11735, ensure that your NETGEAR Nighthawk router firmware is updated to the latest version provided by NETGEAR.

What NETGEAR models are affected by CVE-2026-11735?

CVE-2026-11735 affects several NETGEAR Nighthawk models, which include specific versions of the routers in that series.

What type of vulnerability is CVE-2026-11735?

CVE-2026-11735 is classified as a stack-based buffer overflow vulnerability.

Can an unauthorized user exploit CVE-2026-11735?

An unauthorized user cannot directly exploit CVE-2026-11735 as it requires an authenticated admin user to make modifications.