CVE-2026-11739
MediumCVSS 4.9Exploitation Probability (EPSS)
Elevated risk61th percentile - higher than 61% of all known CVEs
Summary
A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.
Risk Assessment
An attacker on the local network can take control of the device, potentially leading to network and data security breaches.
Recommendation
Update NETGEAR Nighthawk device firmware to the latest version and limit trust in local network traffic.
Original NVD description (English source)
A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.