ZDNet reports that certain Netgear router and range extender models face medium-severity security flaws that could let unauthorized users run commands or alter settings on the hardware. Released patches cover supported units, though several older pieces of equipment have reached the end of their service life.
Key takeaways
- Certain Netgear hardware items are susceptible to network-based security exploits.
- The company has distributed firmware fixes for all currently supported equipment.
- Several models have reached end of service, meaning they receive no further updates.
Are you affected by Netgear router security issues?
ZDNet explains that these vulnerabilities differ by model and generally require an attacker to already possess access to the local network or Wi-Fi credentials. The first flaw, tracked as CVE-2026-11732, triggers only if the Block Sites function is turned on. Another issue, CVE-2026-11731, allows an unauthenticated person on the network to view and change administrative settings.
Documented bugs also impact range extenders and older gear. CVE-2026-11730 affects two extenders by letting someone hijack an active administrator session. Meanwhile, CVE-2026-9218 requires an attacker to have both network connection and admin login credentials to run commands.
How to install a firmware update
Users can apply the fixes directly through the device settings page or download the installation files from the manufacturer web portal. Several impacted products are past their support window, including the RAX5 Nighthawk and EX3700 range extender. Netgear recommends upgrading those unsupported pieces of hardware to newer options.
What it means for network owners
Owners of supported gear should apply the new firmware immediately to close off these entry points. People running older equipment that will not receive fixes must replace their hardware to stay protected against potential intrusions.
Frequently asked questions
ZDNet states that the issues stem from multiple medium-severity vulnerabilities tracked under specific CVE numbers that could allow unauthorized command execution or settings changes.
You can update your router to the latest firmware directly through its settings menu or grab the update files from the Netgear website.
Routers that reached end of service will not receive further updates, and Netgear advises owners of those models to switch to a newer device.
No, the exploits impact only a small number of specific router and range extender models detailed in the security advisory.
Yes, the flaws generally require an attacker to gain prior access to your local network or possess your Wi-Fi credentials.
Based on reporting by ZDNet. Read the original article
