Insufficient input validation vulnerability exists in website blocking feature of certain NETGEAR RAX/CAX series models
An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized commands on the router. This vulnerability could affect the confidentiality, integrity, and availability of the affected router. It applies only when the Block Sites feature is turned on.
CVE-2026-11732
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-11732
CAX30
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RAX30
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RAX5
Source reference: /containers/cna/affected/2/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
RAXE300
Source reference: /containers/cna/affected/3/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "NETGEAR",
"product": "CAX30",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.3.4.12",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "RAX30",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V1.0.14.108",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "RAX5",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V1.0.5.34",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NETGEAR",
"product": "RAXE300",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V1.0.10.72",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2026-11732
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #32444 · Revision 1
- Added to Heist Feed
- Publisher date