CVE-2026-11732 Details
Description
An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized commands on the router. This vulnerability could affect the confidentiality, integrity, and availability of the affected router. It applies only when the Block Sites feature is turned on.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Oct 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory | Netgear, Inc. | |
| https://www.netgear.com/support/product/cax30/ | Netgear, Inc. | |
| https://www.netgear.com/support/product/rax30/ | Netgear, Inc. | |
| https://www.netgear.com/support/product/rax5/ | Netgear, Inc. | |
| https://www.netgear.com/support/product/raxe300/ | Netgear, Inc. |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-20 | Improper Input Validation | Netgear, Inc. |
Affected Products
No affected product data is available for this CVE.
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 16, 2026 | CVE Modified | Netgear, Inc. |
| Oct 14, 2026 | CVE Modified | CISA-ADP |
| Oct 13, 2026 | CVE Modified | Netgear, Inc. |
| Oct 13, 2026 | CVE Modified | CISA-ADP |
| Oct 13, 2026 | New CVE Received | Netgear, Inc. |