CVE-2026-11733: rax41 firmware before 1.1.6.36 (exclusive); +21 more affected products

Affected technology

rax41 firmware · before 1.1.6.36 (exclusive)
netgear

rax41v2 firmware · before 1.1.6.36 (exclusive)
netgear

rax42 firmware · before 1.1.6.36 (exclusive)
netgear

rax42v2 firmware · before 1.1.6.36 (exclusive)
netgear

rax43 firmware · before 1.1.6.36 (exclusive)
netgear

rax43v2 firmware · before 1.1.6.36 (exclusive)
netgear

rax49s firmware · before 1.1.6.36 (exclusive)
netgear

rax50 firmware · before 1.1.6.36 (exclusive)
netgear

rax50v2 firmware · before 1.1.6.36 (exclusive)
netgear

rax54s firmware · before 1.1.6.36 (exclusive)
netgear

rax54sv2 firmware · before 1.1.6.36 (exclusive)
netgear

RAX41 · 0 to before V1.1.6.36
NETGEAR

RAX41v2 · 0 to before V1.1.6.36
NETGEAR

RAX42 · 0 to before V1.1.6.36
NETGEAR

RAX42v2 · 0 to before V1.1.6.36
NETGEAR

RAX43 · 0 to before V1.1.6.36
NETGEAR

RAX43v2 · 0 to before V1.1.6.36
NETGEAR

RAX49S · 0 to before V1.1.6.36
NETGEAR

RAX50 · 0 to before V1.1.6.36
NETGEAR

RAX50v2 · 0 to before V1.1.6.36
NETGEAR

RAX54S · 0 to before V1.1.6.36
NETGEAR

RAX54Sv2 · 0 to before V1.1.6.36
NETGEAR

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Adjacent network · High privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 4.0 assessment (base score 1.1/10) rates confidentiality and integrity impact as none; availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.