Skip to content
Netgear Patches Flaws in Routers and Extenders

Netgear Patches Flaws in Routers and Extenders

First seen 29 Oct 2026, 15:47 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 29, 2026 at 17:45 UTC
  • •Three critical vulnerabilities patched in Netgear routers and extenders.
  • •Attackers can execute commands or bypass admin logins with local access.
  • •Users must update firmware immediately or replace unsupported devices.

Netgear has released patches for three security vulnerabilities affecting several router and extender models, including the CAX30, RAX30, RAX5, RAXE300, and EX3700. The vulnerabilities, classified as moderately severe, allow attackers with local network access to execute unauthorized commands or bypass admin login credentials. Specifically, CVE-2026-11732 enables command execution when the website blocking feature is enabled, while CVE-2026-11731 allows login bypass for certain models. The EX3700 and EX6120 extenders are vulnerable to CVE-2026-11730, which can hijack admin sessions. Users are urged to update their firmware immediately, and those with unsupported models like the R7000 should consider replacing their devices. Additional vulnerabilities affecting unsupported models were also disclosed, but these will not receive further updates.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-13
Vulnerabilities disclosed
Netgear published a security advisory detailing multiple vulnerabilities affecting various router models.
netgear.prf.hn
2026-10-13
CVE-2026-9218 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-107917 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-11732 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-11730 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-107918 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-11731 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-29
Patches released
Netgear released firmware updates to address the vulnerabilities and urged users to apply them immediately.
Pcworld

More articles in this cluster (2)

Following this threat?

Track CVE-2026-107917 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (8)

1 / 3

Common questions

Which models are affected?
Affected models include CAX30, RAX30, RAX5, RAXE300, and EX3700.
What should I do if I have an unsupported model?
Netgear recommends replacing unsupported models like the R7000 to maintain security.
How serious are these vulnerabilities?
The vulnerabilities are classified as moderately severe, allowing potential unauthorized access if exploited.