{"id":"CVE-2026-11731","published":"2026-10-13T15:17:43.510","lastModified":"2026-10-16T14:17:24.080","description":"An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the confidentiality and integrity of management data and the availability of device-management functions.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-288"],"vendors":[],"products":[],"references":[{"url":"https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory","tags":[]},{"url":"https://www.netgear.com/support/product/rax30","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"An authentication bypass vulnerability in NETGEAR RAX series routers allows attackers with adjacent network access to fully compromise device management functions without needing credentials. This creates a high-risk exposure for home and small office networks.","exploitability":"Exploitation requires adjacent network access and is relatively straightforward, needing only basic network connectivity to the affected device's management interface.","blast_radius":"An unauthenticated attacker with adjacent access could gain full administrative control over the router, potentially compromising the entire local network and enabling further attacks on connected devices.","remediation":"Disable the affected management service or restrict access to TCP port 80/443 from untrusted networks, as no fixed version has been published yet.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","network","router","wireless"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:04:41.475Z"}}