Netgear patches medium-severity flaws in several routers and extenders
Firmware is available for affected models, but the RAX5, EX3700, CBR40, R7000, R7000P and RAX40 have reached end of service, according to ZDNET.
Netgear has published a security advisory covering several vulnerabilities in its routers and range extenders and released new firmware for each affected model, according to ZDNET. All the flaws are rated medium severity.
One flaw, tracked as CVE-2026-11732, allows an attacker with network access to run unauthorized commands when the Block Sites feature is enabled. It affects the CAX30, RAX30, RAX5 and RAXE300. A second, CVE-2026-11731, lets an unauthenticated attacker on the local network view and modify device details and administrative settings on the RAX28, RAX29 and RAX30.
CVE-2026-11730 allows an attacker with local network access to hijack an authenticated administrator session on the web management portal; the EX3700 and EX6120 range extenders are affected. The fourth issue, CVE-2026-9218, lets someone on the local network who holds the administrator username and password run unauthorized commands, and affects the CBR40, R7000, R7000P and RAX40.
The new firmware can be installed through the router settings or downloaded from Netgear's website. Netgear says the RAX5, EX3700, CBR40, R7000, R7000P and RAX40 have reached end of service, so no further updates will follow for those models.
For the CBR40, the latest firmware does not fix the security bug, and Netgear advises users to move to a newer device.
Quick answers
Which Netgear models are affected by the vulnerabilities?
The CAX30, RAX30, RAX5, RAXE300, RAX28, EX3700, EX6120, CBR40, R7000, R7000P, RAX40 and RAX29 are covered by the advisory.
Will the end-of-service models get further updates?
No. The RAX5, EX3700, CBR40, R7000, R7000P and RAX40 have reached end of service, so no further updates will follow.
Does the CBR40 firmware fix the flaw?
No. For the CBR40, the latest firmware does not fix the security bug, and Netgear advises moving to a newer device.