Important Security Fixes Available for Some Netgear Routers

If you are a Netgear router owner, it’s vital to be aware of recent security vulnerabilities that could expose your device to risks. Thankfully, the company has proactively addressed these issues by rolling out firmware patches for affected models.

Understanding the Vulnerabilities

Netgear's advisory details specific flaws found in certain routers that could be exploited by users who manage to gain local network access. Although these vulnerabilities are categorized as medium severity, they still pose a notable threat.

Vulnerability Details

Each security flaw is tracked by a unique identifier, commonly referred to as a CVE (Common Vulnerabilities and Exposures) number. Here are the vulnerabilities currently of concern:

• CVE-2026-11732: This issue could allow an individual with local network access to execute unauthorized commands on the router, particularly when the Block Sites feature is engaged. The models affected include:
• CAX30 Nighthawk AX6 6-Stream WiFi 6 Cable Modem Router
• RAX30 Nighthawk AX5 5-Stream AX2400 WiFi 6 Router
• RAX5 4-Stream AX1600 WiFi 6 Router (End of Service)
• RAXE300 Nighthawk AXE7800 Tri-Band WiFi 6E Router
• CVE-2026-11731: This vulnerability permits unauthorized users within your network to view and modify specific settings of your router. The models affected include:
• RAX28 Nighthawk AX5 5-Stream AX2200 WiFi 6 Router
• RAX29 Nighthawk AX2400 WiFi 6 Router
• CVE-2026-11730: This vulnerability concerns two range extenders. If someone has local access, they may hijack an authenticated session on the management portal. Those affected are:
• EX3700 AC750 WiFi Range Extender Essentials Edition (End of Service)
• EX6120 AC1200 Dual Band WiFi Range Extender
• CVE-2026-9218: Identified in several models, this vulnerability allows connected individuals with admin privileges to execute unauthorized commands. The affected devices include:
• CBR40 Orbi AC2200 Tri-band WiFi Cable Modem Router (End of Service)
• R7000 Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router (End of Service)
• R7000P Nighthawk AC2300 Smart WiFi Dual Band Gigabit Router (End of Service)
• RAX40 Nighthawk AX4 4-Stream WiFi Router (End of Service)

Steps to Protect Your Network

To secure your router against these vulnerabilities, it’s essential to update your firmware promptly. You can perform the update through your router’s settings or visit the Netgear website to download the latest version directly.

It’s also important to know that some routers have reached their End of Service (EoS), meaning they will not receive any further updates. In such cases, Netgear strongly recommends upgrading to newer models that offer better security features.

Why Security Updates Matter

Keeping your firmware up-to-date is a crucial aspect of maintaining the security of your home network. Cyber threats are becoming increasingly sophisticated, making it imperative for users to remain informed about potential vulnerabilities and take swift action.

Consult Netgear’s official security advisories for more detailed information on these vulnerabilities and ensure that your devices are protected.