GoKawiilNetgear patches medium-severity command-injection flaw in several router models
Netgear has issued a security advisory for CVE-2026-11732, a vulnerability that lets an attacker already on a user's network run unauthorized commands on certain routers if the Block Sites feature is enabled. Affected models include the CAX30, RAX30, RAX5, and RAXE300, and Netgear has released firmware updates for all supported devices. One model, the RAX5, has reached end of support and will not receive further patches.