Do you own a Netgear router? The bad news is that the device could be susceptible to a security flaw that would leave it vulnerable to an attacker. The good news: This exploit affects only a small number of Netgear routers, and the company has already issued patches to squash the bugs. Also: Run this 10-step security check on your phone once a year The vulnerabilities differ slightly among the various affected models, as described in Netgear’s security advisory. In general, these flaws could be exploited by an attacker who gains access to your network, allowing them to run unauthorized and potentially malicious commands on the router. More from ZDNET All the flaws are ranked as medium severity but clearly still pose a threat, prompting Netgear to roll out new firmware for each impacted model. You should be able to update your router to the latest firmware directly through its settings, but you can also grab each update from Netgear’s website. Here are descriptions of the vulnerabilities, the names and models of the affected routers, and links to download the patches. Described in CVE-2026-11732, the first vulnerability could allow an attacker who already has access to your network, most likely through your Wi-Fi credentials, to run unauthorized commands on the device. The flaw is exploitable only if you’ve enabled the Block Sites feature, which blocks access to specific web sites based on domain name or keywords. Also: Firefox and Chrome patch 200+ security flaws combined Aff...
Your Netgear router may be vulnerable to a security exploit – how to check and patch it
ZDNet
·Lance Whitney
·Published Oct 30, 2026
·Updated
Affected Software
3 affected components
Netgear RAX5 4-Stream AX1600 WiFi 6 Router
Netgear EX3700 AC750 WiFi Range Extender Essentials Edition
Netgear CBR40 Orbi AC2200 Tri-band WiFi Cable Modem Router
Frequently Asked Questions
1
Which Netgear devices are affected by the disclosed vulnerabilities?
The article identifies the Netgear RAX5 4-Stream AX1600 WiFi 6 Router, EX3700 AC750 WiFi Range Extender Essentials Edition, and CBR40 Orbi AC2200 Tri-band WiFi Cable Modem Router as affected devices.
2
What could an attacker do by exploiting these flaws?
An attacker who has already gained access to the network could exploit the flaws to run unauthorized and potentially malicious commands on the router.
3
How severe are the vulnerabilities?
All of the flaws are rated medium severity. Netgear nevertheless issued new firmware for each impacted model.
4
What should affected device owners do?
Update the device to the latest firmware through its settings or download the applicable update from Netgear’s website.
5
Does the article indicate that remote internet attackers can exploit the vulnerabilities directly?
No. The article says exploitation requires an attacker to already have access to the affected network.