CVE-2026-11734: mr70 firmware before 1.0.4.48 (exclusive); +29 more affected products

Affected technology

mr70 firmware · before 1.0.4.48 (exclusive)
netgear

mr90 firmware · before 1.0.2.46 (exclusive)
netgear

ms70 firmware · through 1.0.4.48 (inclusive)
netgear

ms90 firmware · before 1.0.2.46 (exclusive)
netgear

rax41 firmware · before 1.1.6.36 (exclusive)
netgear

rax41v2 firmware · before 1.1.6.36 (exclusive)
netgear

rax42 firmware · before 1.1.6.36 (exclusive)
netgear

rax42v2 firmware · before 1.1.6.36 (exclusive)
netgear

rax43 firmware · before 1.1.6.36 (exclusive)
netgear

rax43v2 firmware · before 1.1.6.36 (exclusive)
netgear

rax49s firmware · before 1.1.6.36 (exclusive)
netgear

rax50 firmware · before 1.1.6.36 (exclusive)
netgear

rax50v2 firmware · before 1.1.6.36 (exclusive)
netgear

rax54s firmware · before 1.1.6.36 (exclusive)
netgear

rax54sv2 firmware · before 1.1.6.36 (exclusive)
netgear

MR70 · 0 to before V1.0.4.48
NETGEAR

MR90 · 0 to before V1.0.2.46
NETGEAR

MS70 · 0 to before V1.0.4.48
NETGEAR

MS90 · 0 to before V1.0.2.46
NETGEAR

RAX41 · 0 to before V1.1.6.36
NETGEAR

RAX41v2 · 0 to before V1.1.6.36
NETGEAR

RAX42 · 0 to before V1.1.6.36
NETGEAR

RAX42v2 · 0 to before V1.1.6.36
NETGEAR

RAX43 · 0 to before V1.1.6.36
NETGEAR

RAX43v2 · 0 to before V1.1.6.36
NETGEAR

RAX49S · 0 to before V1.1.6.36
NETGEAR

RAX50 · 0 to before V1.1.6.36
NETGEAR

RAX50v2 · 0 to before V1.1.6.36
NETGEAR

RAX54S · 0 to before V1.1.6.36
NETGEAR

RAX54Sv2 · 0 to before V1.1.6.36
NETGEAR

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Adjacent network · High privileges required · No user interaction required

What an attacker can do

An authenticated admin user can cause the affected device to become temporarily unavailable. Source advisory’s CVSS 4.0 assessment (base score 1.1/10) rates confidentiality and integrity impact as none; availability impact as low.