CYBER CODE RED

Get real-time updates on Telegram

P5

CVE-2026-11738: be9300 firmware before 1.0.1.84 (exclusive); +28 more affected products

CVE-2026-11738. CVSS 3.1 base score 4.4 (MEDIUM, NVD). EPSS 0.00269 (percentile 0.17994), scored 22-Oct-2026.

Affected technology

be9300 firmware · before 1.0.1.84 (exclusive)
netgear

mr60 firmware · before 1.1.8.142 (exclusive)
netgear

ms60 firmware · before 1.1.8.142 (exclusive)
netgear

r6700ax firmware · before 1.0.18.164 (exclusive)
netgear

rax10 firmware · before 1.0.5.50 (exclusive)
netgear

rax120 firmware · before 1.2.10.56 (exclusive)
netgear

rax120v2 firmware · before 1.2.10.56 (exclusive)
netgear

rax20 firmware · before 1.0.17.142 (exclusive)
netgear

rax28 firmware · before 1.0.14.108 (exclusive)
netgear

rax29 firmware · before 1.0.14.108 (exclusive)
netgear

rax30 firmware · before 1.0.14.108 (exclusive)
netgear

rax36s firmware · before 1.0.5.50 (exclusive)
netgear

rax43 firmware · before 1.0.17.142 (exclusive)
netgear

rax45 firmware · before 1.0.17.142 (exclusive)
netgear

rax50 firmware · before 1.0.17.142 (exclusive)
netgear

rax70 firmware · before 1.0.19.172 (exclusive)
netgear

rbr760 firmware · before 6.3.8.11 (exclusive)
netgear

rbs760 firmware · before 6.3.8.11 (exclusive)
netgear

rs100 firmware · before 1.0.1.80 (exclusive)
netgear

rs200 firmware · before 1.0.1.90 (exclusive)
netgear

rs280 firmware · before 1.0.1.90 (exclusive)
netgear

rs300 firmware · before 1.0.1.90 (exclusive)
netgear

rs500 firmware · before 1.0.1.90 (exclusive)
netgear

rs600 firmware · before 1.0.1.90 (exclusive)
netgear

rs70 firmware · before 1.0.1.80 (exclusive)
netgear

rs90 firmware · before 1.0.1.80 (exclusive)
netgear

R7000 · 0 to before *
NETGEAR

RAXE500 · 0 to before V1.2.14.114
NETGEAR

RS700 · 0 to before V1.0.7.66
NETGEAR

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Adjacent network · High privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 4.0 assessment (base score 4.3/10) rates confidentiality and availability impact as none; integrity impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-20
CCR priority
17.7 /100 (P5)
CVSS 3.1
4.4 /10 · CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N · NVD
EPSS
0.00269 · percentile 0.17994 · 2026-10-22
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-11738.html