CVE-2026-11732

An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized commands on the router. This vulnerability could affect the confidentiality, integrity, and availability of the affected router. It applies only when the Block Sites feature is turned on.

CVSS

6.3

EPSS

0.002 (15.2th percentile)

CISA KEV

Not listed

Exploitation

none

Public exploits

None seen

State

PUBLISHED

Coverage

• 

  TechRadar / Tom's Guide / PCWorld / Pocket-lint / Stuff◇Specialist. Specialist publisher: established trade press, or expert analysis with a track record2 hours ago

  Netgear patches three flaws in its routers and extenders. Update now

  According to a recently published security advisory report, Netgear has discovered several vulnerabilities in its networking products. All are classified as moderately severe, and the company has now released updates to patch the security holes. One of the vulnerabilities (CVE-2026-11732) affects…

  ↗pcworld.com/article/3272344/netgear-patches-thr…(opens the publisher's site in a new tab)

What we observed