CVE-2026-11739: ms90 firmware before 1.0.2.46 (exclusive); +53 more affected products

Affected technology

ms90 firmware · before 1.0.2.46 (exclusive)
netgear

rax20 firmware · before 1.0.17.142 (exclusive)
netgear

rax200 firmware · before 1.0.11.148 (exclusive)
netgear

rax35 firmware · before 1.0.17.142 (exclusive)
netgear

rax35v2 firmware · before 1.0.17.142 (exclusive)
netgear

rax41 firmware · before 1.1.6.36 (exclusive)
netgear

rax41v2 firmware · before 1.1.6.36 (exclusive)
netgear

rax42 firmware · before 1.1.6.36 (exclusive)
netgear

rax42v2 firmware · before 1.1.6.36 (exclusive)
netgear

rax43 firmware · before 1.1.6.36 (exclusive)
netgear

rax43v2 firmware · before 1.1.6.36 (exclusive)
netgear

rax45 firmware · before 1.0.17.142 (exclusive)
netgear

rax49s firmware · before 1.1.6.36 (exclusive)
netgear

rax50 firmware · before 1.1.6.36 (exclusive)
netgear

rax50v2 firmware · before 1.1.6.36 (exclusive)
netgear

rax54s firmware · before 1.1.6.36 (exclusive)
netgear

rax54sv2 firmware · before 1.1.6.36 (exclusive)
netgear

rax80 firmware · before 1.0.11.148 (exclusive)
netgear

raxe500 firmware · before 1.2.14.110 (exclusive)
netgear

rs700 firmware · before 1.0.9.6 (exclusive)
netgear

xr1000 firmware · before 1.1.0.22 (exclusive)
netgear

xr1000v2 firmware · before 1.1.0.22 (exclusive)
netgear

mr60 firmware · before 1.1.8.142 (exclusive)
netgear

mr70 firmware · before 1.0.4.48 (exclusive)
netgear

mr90 firmware · before 1.0.2.46 (exclusive)
netgear

ms60 firmware · before 1.1.8.142 (exclusive)
netgear

ms70 firmware · before 1.0.4.48 (exclusive)
netgear

MR60 · 0 to before V1.1.8.142
NETGEAR

MR70 · 0 to before V1.0.4.48
NETGEAR

MR90 · 0 to before V1.0.2.46
NETGEAR

MS60 · 0 to before V1.1.8.142
NETGEAR

MS70 · 0 to before V1.0.4.48
NETGEAR

MS90 · 0 to before V1.0.2.46
NETGEAR

RAX20 · 0 to before V1.0.17.142
NETGEAR

RAX200 · 0 to before V1.0.11.148
NETGEAR

RAX35 · 0 to before V1.0.17.142
NETGEAR

RAX35v2 · 0 to before V1.0.17.142
NETGEAR

RAX41 · 0 to before V1.1.6.36
NETGEAR

RAX41v2 · 0 to before V1.1.6.36
NETGEAR

RAX42 · 0 to before V1.1.6.36
NETGEAR

RAX42v2 · 0 to before V1.1.6.36
NETGEAR

RAX43 · 0 to before V1.1.6.36
NETGEAR

RAX43v2 · 0 to before V1.1.6.36
NETGEAR

RAX45 · 0 to before V1.0.17.142
NETGEAR

RAX49S · 0 to before V1.1.6.36
NETGEAR

RAX50 · 0 to before V1.1.6.36
NETGEAR

RAX50v2 · 0 to before V1.1.6.36
NETGEAR

RAX54S · 0 to before V1.1.6.36
NETGEAR

RAX54Sv2 · 0 to before V1.1.6.36
NETGEAR

RAX80 · 0 to before V1.0.11.148
NETGEAR

RAXE500 · 0 to before V1.2.14.110
NETGEAR

RS700 · 0 to before V1.0.9.6
NETGEAR

XR1000 · 0 to before V1.1.0.22
NETGEAR

XR1000v2 · 0 to before V1.1.0.22
NETGEAR

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Adjacent network · No privileges required · No user interaction required

What an attacker can do

A network-adjacent attacker with the ability can intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device. Source advisory’s CVSS 4.0 assessment (base score 4.9/10) rates confidentiality and integrity impact as high; availability impact as none.