CVE-2026-11814 — Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers
A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the…
Published: 2026-08-11 · CVSS: 4.9 · CVSS 4.0
A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7