Netgear patches three flaws in its routers and extenders. Replace now
One other vulnerability (CVE-2026-11731) impacts the RAX28, RAX29, and RAX30 fashions. This one permits an attacker with native entry to the router’s admin interface to bypass login and modify sure settings.
In the meantime, the EX3700 and EX6120 fashions of Netgear’s Wi-Fi extenders are additionally affected by a vulnerability (CVE-2026-11730) that may very well be exploited to hijack a logged-in administrator session.
Netgear has launched updates for the affected fashions and recommends that customers set up the most recent firmware as quickly as attainable. The corporate additionally urges customers to allow automated updates the place attainable.
A handful of different vulnerabilities had been additionally included within the safety advisory, together with CVE-2026-9218, CVE-2026-107918, and CVE-2026-107917. These solely have an effect on now not supported fashions just like the R7000, RAX40, and R7300DST. All unsupported fashions, together with the RAX5 and EX3700, will now not obtain safety updates. In such circumstances, Netgear recommends changing these with newer merchandise.
