CVE-2026-11731

Summary

An authentication bypass vulnerability in NETGEAR RAX series routers allows attackers with adjacent network access to fully compromise device management functions without needing credentials. This creates a high-risk exposure for home and small office networks.

Exploitability

Exploitation requires adjacent network access and is relatively straightforward, needing only basic network connectivity to the affected device's management interface.

Blast radius

An unauthenticated attacker with adjacent access could gain full administrative control over the router, potentially compromising the entire local network and enabling further attacks on connected devices.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the affected management service or restrict access to TCP port 80/443 from untrusted networks, as no fixed version has been published yet.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.