CVE-2026-11734 Device administrator can interrupt the normal operation of some NETGEAR Nighthawk devices.
An authenticated administrator can trigger a buffer overflow to cause a temporary denial of service on NETGEAR Nighthawk devices.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-11734?
CVE-2026-11734 is a low-severity memory corruption vulnerability in Netgear Rax50 Firmware, published on 11 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.
Weakness: CWE-121
Which versions are affected by CVE-2026-11734?
It affects 15 products.
Products include Netgear Mr70 Firmware, Netgear Mr90 Firmware, Netgear Ms70 Firmware, Netgear Ms90 Firmware, Netgear Rax41 Firmware, Netgear Rax41v2 Firmware and 9 more.
How do I fix CVE-2026-11734?
No fix has been published for CVE-2026-11734 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-11734 being exploited?
There is no known exploitation of CVE-2026-11734 in the wild and no public exploit code.
Other vulnerabilities in Netgear Rax50 Firmware
Sources
Also known as GHSA-g6fv-h3pw-rwgm.