Update Your Netgear Router: Security Vulnerabilities Found

If you own a Netgear router, it's essential to be aware of recently discovered security vulnerabilities that may put your device at risk. Fortunately, the company has responded by releasing patches for affected models, ensuring your router can be updated to enhance security.

Identifying the Vulnerabilities

The identified vulnerabilities allow potential attackers with local network access to exploit flaws in certain Netgear routers. Although the issues vary between models, they primarily enable unauthorized access to the device, which could let an attacker execute harmful commands.

These vulnerabilities have been classified as medium severity, meaning they require prompt attention. Netgear has made firmware updates available to address these issues. Ensuring your router is up-to-date can significantly enhance your home network’s security.

Security Advisories

According to Netgear's latest security advisories, there are specific vulnerabilities categorized under various CVE identifiers. Here’s a breakdown of these vulnerabilities and the routers affected:

CVE-2026-11732

The first vulnerability, CVE-2026-11732, allows someone with local network access to issue unauthorized commands on the router if the Block Sites feature is enabled.

• Affected Routers:
  • CAX30 Nighthawk AX6 6-Stream WiFi 6 Cable Modem Router
  • RAX30 Nighthawk AX5 5-Stream AX2400 WiFi 6 Router
  • RAX5 4-Stream AX1600 WiFi 6 Router (reached end of support)
  • RAXE300 Nighthawk AXE7800 Tri-Band WiFi 6E Router

CVE-2026-11731

The second vulnerability, CVE-2026-11731, permits unauthenticated users with network access to view and modify some settings and device details.

• Affected Routers:
  • RAX28 Nighthawk AX5 5-Stream AX2200 WiFi 6 Router
  • RAX29 Nighthawk AX2400 WiFi 6 Router

CVE-2026-11730

CVE-2026-11730 affects two range extenders that could be compromised if an attacker accesses the local network.

• Affected Routers:
  • EX3700 AC750 WiFi Range Extender Essentials Edition (reached end of support)
  • EX6120 AC1200 Dual Band WiFi Range Extender

CVE-2026-9218

The final vulnerability, CVE-2026-9218, allows an attacker with admin credentials to run unauthorized commands if they can access the local network.

• Affected Routers:
  • CBR40 Orbi AC2200 Tri-band WiFi Cable Modem Router (reached end of support)
  • R7000 Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router (reached end of support)
  • R7000P Nighthawk AC2300 Smart WiFi Dual Band Gigabit Router (reached end of support)
  • RAX40 Nighthawk AX4 4-Stream WiFi Router (reached end of support)

What to Do Next

For anyone with an affected router, immediate action is recommended. You can check for updates directly through your device's settings menu, or you can download the necessary firmware updates from the Netgear website.

Keep in mind that some models have reached their end of support life, meaning they will not receive further updates. If you own such a device, consider upgrading to a newer router model that will provide ongoing security updates and protection.

Maintaining security on your home network is critical. Regularly checking for firmware updates and being aware of potential vulnerabilities can help prevent unauthorized access to your devices.