CVE-2026-11732: CWE-20 Improper input validation in NETGEAR CAX30
Description
CVE-2026-11732 is an input validation vulnerability in the Block Sites feature of the NETGEAR CAX30 router. A network-adjacent attacker with network access, such as WiFi credentials, can exploit this flaw to run unauthorized commands on the router. This affects the confidentiality, integrity, and availability of the device. The vulnerability only applies when the Block Sites feature is enabled.
CVSS v4.0
Score 6.3medium
Affected software
NETGEAR
CAX30
NETGEAR
RAX30
NETGEAR
RAX5
NETGEAR
RAXE300
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves insufficient input validation in the Block Sites feature of the NETGEAR CAX30 router models. An attacker with network access can leverage this flaw to execute unauthorized commands on the router, potentially compromising its confidentiality, integrity, and availability. The issue is present in specific firmware versions prior to 2.3.4.12, 1.0.14.108, 1.0.5.34, and 1.0.10.72. The vulnerability requires the Block Sites feature to be enabled to be exploitable.
Potential Impact
Successful exploitation allows a network-adjacent attacker to execute unauthorized commands on the router, impacting the device's confidentiality, integrity, and availability. This could lead to unauthorized control or disruption of router functions.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, disabling the Block Sites feature will prevent exploitation of this vulnerability.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- NETGEAR
- Date Reserved
- 2026-06-09T02:46:41.216Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ace44e52cdf04f656782271
Added to database: 10/13/2026, 14:49:09 UTC
Last enriched: 10/13/2026, 15:03:55 UTC
Last updated: 10/13/2026, 15:08:25 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.