A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.
History

Tue, 11 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
Description A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.
Title Command injection vulnerability in some NETGEAR Nighthawk devices
Weaknesses CWE-78
References
Metrics cvssV4_0

{'score': 4.9, 'vector': 'CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:L/U:Amber'}


cve-icon MITRE

Status: PUBLISHED

Assigner: NETGEAR

Published:

Updated: 2026-08-11T15:06:14.908Z

Reserved: 2026-06-09T02:46:48.152Z

Link: CVE-2026-11739

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-11T16:17:28.260

Modified: 2026-08-11T16:17:28.260

Link: CVE-2026-11739

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.