Netgear has released firmware updates addressing three vulnerabilities in a range of routers and Wi-Fi extenders, according to a security advisory reported by PCWorld. The affected products include the CAX30, RAX30, RAX5, RAXE300, RAX28, RAX29, EX3700 and EX6120, although the products and vulnerabilities are not affected in the same way.
For installers and service providers responsible for residential networks, the advisory is relevant because two of the reported flaws require some level of local access, while the third affects an administrator session on an extender. Netgear recommends installing the latest firmware and enabling automatic updates where that option is available. The company has classified the vulnerabilities as moderately severe.
Three vulnerabilities affect different product groups
CVE-2026-11732 affects the CAX30, RAX30, RAX5 and RAXE300. An attacker who already has access to the local network, such as through the Wi-Fi password, could use the flaw to execute unauthorized commands on the router. PCWorld reported that the issue is present when the website-blocking feature is enabled.
CVE-2026-11731 affects the RAX28, RAX29 and RAX30. In this case, a person with local access to the router’s administrative interface could bypass the login process and change certain settings. The third issue, CVE-2026-11730, affects the EX3700 and EX6120 Wi-Fi extenders and could allow an attacker to take over an active administrator session.
- CVE-2026-11732: CAX30, RAX30, RAX5 and RAXE300; unauthorized command execution after local network access
- CVE-2026-11731: RAX28, RAX29 and RAX30; administrative login bypass and settings changes
- CVE-2026-11730: EX3700 and EX6120; possible hijacking of a logged-in administrator session
Unsupported hardware remains a separate concern
The advisory also lists CVE-2026-9218, CVE-2026-107918 and CVE-2026-107917, which affect models that are no longer supported, including the R7000, RAX40 and R7300DST. PCWorld also identified the RAX5 and EX3700 among products that will no longer receive security updates, creating a distinction between applying the current fixes and managing hardware that has reached the end of its support period.
That distinction matters in installed systems where a router or extender may remain in service after its replacement cycle. A firmware update can address a disclosed issue on a supported product, but it does not restore ongoing security support to a discontinued model. For dealers and integrators maintaining network inventories, the advisory provides a reason to verify model numbers, firmware status and support eligibility rather than treating every deployed Netgear device as part of the same update path.
Implications for managed residential networks
The reported flaws also reinforce the importance of separating administrative access from ordinary client access during service work. The affected scenarios include local network access, access to an administration interface and an already authenticated administrator session. Those conditions make account controls, current Wi-Fi credentials and firmware management relevant parts of a broader network-maintenance program.
Netgear’s stated actions are to install the latest firmware for affected supported products and enable automatic updates where possible. The company’s advisory also identifies additional issues in unsupported equipment, so replacing hardware that no longer receives security updates may be necessary where a current firmware remedy is unavailable. PCWorld reported that Netgear has released updates for the affected supported models, but the extracted report does not provide firmware version numbers or a product-by-product replacement schedule.
