CVE-2026-118144.9MediumCWE-295

CVE-2026-11814: Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers

NETGEAR · BE9300

Vendor fix available · Affected: NETGEAR BE9300 · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

2.2%probability of exploitation in the next 30 days

82nd percentile

050100

Higher than 82% of scored CVEs

4.9MediumCVSS 4.0

LowMediumHighCrit.

DescriptionCVE.org

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.

Affected products20

From the CVE record. A product or version that is not listed is unknown, not unaffected.

NETGEAR · BE9300before V1.0.1.84
NETGEAR · MR60before V1.1.8.142
NETGEAR · MS60before V1.1.8.142
NETGEAR · R6700AXbefore V1.0.18.164
NETGEAR · RAX10before V1.0.5.50
NETGEAR · RAX120before V1.2.10.56
NETGEAR · RAX120v2before V1.2.10.56
NETGEAR · RAX20before V1.0.17.142
NETGEAR · RAX28before V1.0.14.108
NETGEAR · RAX29before V1.0.14.108
NETGEAR · RAX30before V1.0.14.108
NETGEAR · RAX36Sbefore V1.0.5.50
NETGEAR · RAX43before V1.0.17.142
NETGEAR · RAX45before V1.0.17.142
NETGEAR · RAX50before V1.0.17.142
NETGEAR · RAX70before V1.0.19.172
NETGEAR · RBR760before V6.3.8.11
NETGEAR · RBS760before V6.3.8.11
NETGEAR · RS100before V1.0.1.80
NETGEAR · RS200before V1.0.1.90

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Improper Certificate Validation · Cryptography
Vendor: NETGEAR
Published: August 2026
Band: Possible (1 to 10%), August 2026

CoverageNo articles yet

No CyberSIXT article names CVE-2026-11814 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References

15 more references are in the CVE record.