CVE-2026-11737: rax20 firmware before 1.0.18.144 (exclusive); +25 more affected products

Affected technology

rax20 firmware · before 1.0.18.144 (exclusive)
netgear

rax41 firmware · before 1.1.6.36 (exclusive)
netgear

rax41v2 firmware · before 1.1.6.36 (exclusive)
netgear

rax42 firmware · before 1.1.6.36 (exclusive)
netgear

rax42v2 firmware · before 1.1.6.36 (exclusive)
netgear

rax43 firmware · before 1.1.6.36 (exclusive)
netgear

rax43v2 firmware · before 1.1.6.36 (exclusive)
netgear

rax45 firmware · before 1.0.17.142 (exclusive)
netgear

rax49s firmware · before 1.1.6.36 (exclusive)
netgear

rax50 firmware · before 1.1.6.36 (exclusive)
netgear

rax50v2 firmware · before 1.1.6.36 (exclusive)
netgear

rax54s firmware · before 1.1.6.36 (exclusive)
netgear

rax54sv2 firmware · before 1.1.6.36 (exclusive)
netgear

RAX20 · 0 to before V1.0.18.144
NETGEAR

RAX41 · 0 to before V1.1.6.36
NETGEAR

RAX41v2 · 0 to before V1.1.6.36
NETGEAR

RAX42 · 0 to before V1.1.6.36
NETGEAR

RAX42v2 · 0 to before V1.1.6.36
NETGEAR

RAX43 · 0 to before V1.1.6.36
NETGEAR

RAX43v2 · 0 to before V1.1.6.36
NETGEAR

RAX45 · 0 to before V1.0.17.142
NETGEAR

RAX49S · 0 to before V1.1.6.36
NETGEAR

RAX50 · 0 to before V1.1.6.36
NETGEAR

RAX50v2 · 0 to before V1.1.6.36
NETGEAR

RAX54S · 0 to before V1.1.6.36
NETGEAR

RAX54Sv2 · 0 to before V1.1.6.36
NETGEAR

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Adjacent network · High privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 4.0 assessment (base score 4.3/10) rates confidentiality and availability impact as none; integrity impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.