Netgear patches three flaws in its routers and extenders. Update now
· pcworld.com · popularity 20/100 · 0 similar stories today · Computing & Software Development (Technology & Consumer Electronics)
Read the original at pcworld.com →
Summary
According to a recently published security advisory report , Netgear has discovered several vulnerabilities in its networking products. All are classified as moderately severe, and the company has now released updates to patch the security holes. One of the vulnerabilities ( CVE-2026-11732 ) affects the CAX30, RAX30, RAX5, and RAXE300 models. It can be exploited by an attacker who already has access to the local network, for example via the Wi-Fi password. The attacker can then execute unauthorized commands on the router. This vulnerability only exists when the website blocking feature is enabled. Another vulnerability ( CVE-2026-11731 ) affects the RAX28, RAX29, and RAX30 models. This one allows an attacker with local access to the router’s admin interface to bypass login and modify certain settings. Meanwhile, the EX3700 and EX6120 models of Netgear’s Wi-Fi extenders are also affected by a vulnerability ( CVE-2026-11730 ) that could be exploited to hijack a logged-in administrator session. Netgear has released updates for the affected models and recommends that users install the latest firmware as soon as possible. The company also urges users to enable automatic updates where possible. A handful of other vulnerabilities were also included in the security advisory, including CVE-2026-9218 , CVE-2026-107918 , and CVE-2026-107917 . These only affect no longer supported models like the R7000, RAX40, and R7300DST. All unsupported models, including the RAX5 and EX3700, will no longer receive security updates. In such cases, Netgear recommends replacing these with newer products.
Found in: PCWorld. Rating basis: single outlet; outlet tier 2 (unlisted); 1 feeds; feed position 4.