CVE-2026-11732

Name of the Vulnerable Software and Affected Versions NETGEAR RAX/CAX series models (affected versions not specified)

Description An insufficient input validation issue exists in the website blocking feature (Block Sites). This allows a network-adjacent attacker with network access, such as WiFi credentials, to execute unauthorized commands on the router. This issue only occurs when the Block Sites feature is enabled and can impact the confidentiality, integrity, and availability of the system.

Recommendations As a temporary mitigation, disable the Block Sites feature until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.