Another vulnerability (CVE-2026-11731) affects the RAX28, RAX29, and RAX30 models. This one allows an attacker with local access to the router’s admin interface to bypass login and modify certain settings.
Meanwhile, the EX3700 and EX6120 models of Netgear’s Wi-Fi extenders are also affected by a vulnerability (CVE-2026-11730) that could be exploited to hijack a logged-in administrator session.
Netgear has released updates for the affected models and recommends that users install the latest firmware as soon as possible. The company also urges users to enable automatic updates where possible.
A handful of other vulnerabilities were also included in the security advisory, including CVE-2026-9218, CVE-2026-107918, and CVE-2026-107917. These only affect no longer supported models like the R7000, RAX40, and R7300DST. All unsupported models, including the RAX5 and EX3700, will no longer receive security updates. In such cases, Netgear recommends replacing these with newer products.