Medium [CVE-2026-11814] command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device
This medium-severity NETGEAR advisory covers CVE-2026-11814 affecting BE9300, MR60, MS60.
Android app · Google Play
Monitor future NETGEAR CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Summary
A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.
Affected products named by the advisory: BE9300; MR60; MS60; R6700AX; and 4 more.
Affected products named by the advisory: RAX10; RAX120; RAX120v2; RAX20.
- BE9300 before V1.0.1.84
- MR60 before V1.1.8.142
- MS60 before V1.1.8.142
- R6700AX before V1.0.18.164
- RAX10 before V1.0.5.50
- RAX120 before V1.2.10.56
- RAX120v2 before V1.2.10.56
- RAX20 before V1.0.17.142
- RAX28 before V1.0.14.108
- RAX29 before V1.0.14.108
- RAX30 before V1.0.14.108
- RAX36S before V1.0.5.50
Official advisory · high-confidence parse· fetched 1 hour ago·verify at source
- V1.0.1.84
- V1.1.8.142
- V1.0.18.164
- V1.0.5.50
- V1.2.10.56
- V1.0.17.142
- V1.0.14.108
- V1.0.19.172
- V6.3.8.11
- V1.0.1.80
- V1.0.1.90
Official advisory · high-confidence parse· fetched 1 hour ago·verify at source
Mitigation
Upgrade to a fixed release: V1.0.1.84, V1.1.8.142, V1.0.18.164, V1.0.5.50, V1.2.10.56, V1.0.17.142. That is the remediation for this advisory.
The vendor advisory may list additional interim mitigations or workarounds not captured here — review it before change work.
Official advisory · high-confidence parse· fetched 1 hour ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.