Your Netgear router may be vulnerable to a security exploit – how to check and patch it

ZDNet
·
Lance Whitney
·
Published Oct 30, 2026
·
Updated

Do you own a Netgear router? The bad news is that the device could be susceptible to a security flaw that would leave it vulnerable to an attacker. The good news: This exploit affects only a small number of Netgear routers, and the company has already issued patches to squash the bugs. Also: Run this 10-step security check on your phone once a year The vulnerabilities differ slightly among the various affected models, as described in Netgear’s security advisory. In general, these flaws could be exploited by an attacker who gains access to your network, allowing them to run unauthorized and potentially malicious commands on the router. More from ZDNET All the flaws are ranked as medium severity but clearly still pose a threat, prompting Netgear to roll out new firmware for each impacted model. You should be able to update your router to the latest firmware directly through its settings, but you can also grab each update from Netgear’s website. Here are descriptions of the vulnerabilities, the names and models of the affected routers, and links to download the patches. Described in CVE-2026-11732, the first vulnerability could allow an attacker who already has access to your network, most likely through your Wi-Fi credentials, to run unauthorized commands on the device. The flaw is exploitable only if you’ve enabled the Block Sites feature, which blocks access to specific web sites based on domain name or keywords. Also: Firefox and Chrome patch 200+ security flaws combined Aff...

Read full article

Affected Software

3 affected components
Netgear RAX5 4-Stream AX1600 WiFi 6 Router
Netgear EX3700 AC750 WiFi Range Extender Essentials Edition
Netgear CBR40 Orbi AC2200 Tri-band WiFi Cable Modem Router

Frequently Asked Questions

1

Which Netgear devices are affected by the disclosed vulnerabilities?

The article identifies the Netgear RAX5 4-Stream AX1600 WiFi 6 Router, EX3700 AC750 WiFi Range Extender Essentials Edition, and CBR40 Orbi AC2200 Tri-band WiFi Cable Modem Router as affected devices.

2

What could an attacker do by exploiting these flaws?

An attacker who has already gained access to the network could exploit the flaws to run unauthorized and potentially malicious commands on the router.

3

How severe are the vulnerabilities?

All of the flaws are rated medium severity. Netgear nevertheless issued new firmware for each impacted model.

4

What should affected device owners do?

Update the device to the latest firmware through its settings or download the applicable update from Netgear’s website.

5

Does the article indicate that remote internet attackers can exploit the vulnerabilities directly?

No. The article says exploitation requires an attacker to already have access to the affected network.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203