Netgear patches three flaws in its routers and extenders. Update now

According to a recently published security advisory report, Netgear has discovered several vulnerabilities in its networking products. All are classified as moderately severe, and the company has now released updates to patch the security holes.

One of the vulnerabilities (CVE-2026-11732) affects the CAX30, RAX30, RAX5, and RAXE300 models. It can be exploited by an attacker who already has access to the local network, for example via the Wi-Fi password. The attacker can then execute unauthorized commands on the router. This vulnerability only exists when the website blocking feature is enabled.

Another vulnerability (CVE-2026-11731) affects the RAX28, RAX29, and RAX30 models. This one allows an attacker with local access to the router’s admin interface to bypass login and modify certain settings.

Meanwhile, the EX3700 and EX6120 models of Netgear’s Wi-Fi extenders are also affected by a vulnerability (CVE-2026-11730) that could be exploited to hijack a logged-in administrator session.