RCE in Netgear Mr60
CVE-2026-11739
A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality…
Vulnerability class: Command Injection (OS Command Injection)
Affected products
- Netgear Mr60 — versions 0
- Netgear Mr70 — versions 0
- Netgear Mr90 — versions 0
- Netgear Ms60 — versions 0
- Netgear Ms70 — versions 0
- Netgear Ms90 — versions 0
- Netgear Rax20 — versions 0
- Netgear Rax200 — versions 0
- Netgear Rax35 — versions 0
- Netgear Rax35v2 — versions 0
Weakness classification (CWE)
References
- a2826606-91e7-4eb6-899e-8484bd4575d5 (product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (product, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (product, patch)