{
 "schema_version": "1.0",
 "agent_rules": [
  "Use only read-only checks (the commands marked read_only, or the app's own About menu). Never run anything that changes the computer.",
  "Never install, update, uninstall or change settings without the user's clear OK for that exact step.",
  "Only give the user the official links in this feed (official_patch_links and sources). Never send them to a download from anywhere else.",
  "If you cannot tell whether the user is affected, say so plainly instead of guessing.",
  "Say 'unconfirmed' when an incident's confidence is 'unconfirmed'."
 ],
 "incident": {
  "id": "netgear-router-and-extender-fixes-oct-2026",
  "url": "https://patchgap.ai/incidents/netgear-router-and-extender-fixes-oct-2026/",
  "path": "/incidents/netgear-router-and-extender-fixes-oct-2026/",
  "json_url": "https://patchgap.ai/incidents/netgear-router-and-extender-fixes-oct-2026.json",
  "title": "NETGEAR routers and extenders: update your router's firmware (some older models will not get a fix)",
  "category": "network",
  "platforms": [
   "router"
  ],
  "products": [
   "netgear-routers"
  ],
  "status": "partial",
  "status_label": "Partly patched",
  "severity": "medium",
  "severity_source": "NETGEAR rates these bugs Medium.",
  "exploited_in_wild": "unknown",
  "exploited_note": "NETGEAR's notice does not say any of these bugs are being attacked.",
  "exploited_source_url": "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory",
  "confidence": "confirmed",
  "confidence_note": null,
  "first_reported": "2026-10-13",
  "updated_at": "2026-10-27",
  "cves": [
   "CVE-2026-11732",
   "CVE-2026-11731",
   "CVE-2026-11730",
   "CVE-2026-9218"
  ],
  "summary": "NETGEAR fixed several bugs in its home routers and Wi-Fi extenders in October 2026. Most of them need someone already on your Wi-Fi to attack, so they are not huge risks. But a few models are too old to get a fix. For those, NETGEAR says to replace the router.",
  "am_i_affected": "You are affected if you have one of the models listed below. Log in to your router and check its firmware version. Models marked 'end of support' will not get a fix (NETGEAR lists CBR40 as 'Won't Fix').",
  "action": "Update your NETGEAR router's firmware",
  "affected": [
   {
    "product": "netgear-routers",
    "product_name": "NETGEAR home routers and extenders",
    "platform": "router",
    "affected_versions": "CAX30 before V2.3.4.12",
    "fixed_version": "V2.3.4.12",
    "fixed_min": null,
    "fix_note": null,
    "fixed_source_urls": [
     "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory"
    ],
    "check": {
     "menu_path": "Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware Update. Or use the NETGEAR Nighthawk or Orbi app.",
     "command": null,
     "shell": null,
     "read_only": null
    },
    "official_download": "https://www.netgear.com/support/download/"
   },
   {
    "product": "netgear-routers",
    "product_name": "NETGEAR home routers and extenders",
    "platform": "router",
    "affected_versions": "RAX30 before V1.0.14.108 (Block Sites bug) and before V1.0.15.110 (login bug)",
    "fixed_version": "V1.0.14.108 and V1.0.15.110",
    "fixed_min": null,
    "fix_note": null,
    "fixed_source_urls": [
     "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory"
    ],
    "check": {
     "menu_path": "Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware Update. Or use the NETGEAR Nighthawk or Orbi app.",
     "command": null,
     "shell": null,
     "read_only": null
    },
    "official_download": "https://www.netgear.com/support/download/"
   },
   {
    "product": "netgear-routers",
    "product_name": "NETGEAR home routers and extenders",
    "platform": "router",
    "affected_versions": "RAX28 and RAX29 before v1.0.15.110",
    "fixed_version": "v1.0.15.110",
    "fixed_min": null,
    "fix_note": null,
    "fixed_source_urls": [
     "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory"
    ],
    "check": {
     "menu_path": "Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware Update. Or use the NETGEAR Nighthawk or Orbi app.",
     "command": null,
     "shell": null,
     "read_only": null
    },
    "official_download": "https://www.netgear.com/support/download/"
   },
   {
    "product": "netgear-routers",
    "product_name": "NETGEAR home routers and extenders",
    "platform": "router",
    "affected_versions": "RAXE300 before V1.0.10.72",
    "fixed_version": "V1.0.10.72",
    "fixed_min": null,
    "fix_note": null,
    "fixed_source_urls": [
     "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory"
    ],
    "check": {
     "menu_path": "Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware Update. Or use the NETGEAR Nighthawk or Orbi app.",
     "command": null,
     "shell": null,
     "read_only": null
    },
    "official_download": "https://www.netgear.com/support/download/"
   },
   {
    "product": "netgear-routers",
    "product_name": "NETGEAR home routers and extenders",
    "platform": "router",
    "affected_versions": "RAX5 (end of support) before V1.0.5.34",
    "fixed_version": "V1.0.5.34",
    "fixed_min": null,
    "fix_note": null,
    "fixed_source_urls": [
     "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory"
    ],
    "check": {
     "menu_path": "Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware Update. Or use the NETGEAR Nighthawk or Orbi app.",
     "command": null,
     "shell": null,
     "read_only": null
    },
    "official_download": "https://www.netgear.com/support/download/"
   },
   {
    "product": "netgear-routers",
    "product_name": "NETGEAR home routers and extenders",
    "platform": "router",
    "affected_versions": "EX6120 before V1.0.1.74; EX3700 (end of support) before V1.0.0.102",
    "fixed_version": "V1.0.1.74 (EX6120) / V1.0.0.102 (EX3700)",
    "fixed_min": null,
    "fix_note": null,
    "fixed_source_urls": [
     "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory"
    ],
    "check": {
     "menu_path": "Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware Update. Or use the NETGEAR Nighthawk or Orbi app.",
     "command": null,
     "shell": null,
     "read_only": null
    },
    "official_download": "https://www.netgear.com/support/download/"
   },
   {
    "product": "netgear-routers",
    "product_name": "NETGEAR home routers and extenders",
    "platform": "router",
    "affected_versions": "R7000 before v1.0.11.130; R7000P before V1.3.3.152; RAX40 before V1.0.3.64 (all end of support)",
    "fixed_version": "v1.0.11.130 (R7000) / V1.3.3.152 (R7000P) / V1.0.3.64 (RAX40)",
    "fixed_min": null,
    "fix_note": null,
    "fixed_source_urls": [
     "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory"
    ],
    "check": {
     "menu_path": "Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware Update. Or use the NETGEAR Nighthawk or Orbi app.",
     "command": null,
     "shell": null,
     "read_only": null
    },
    "official_download": "https://www.netgear.com/support/download/"
   },
   {
    "product": "netgear-routers",
    "product_name": "NETGEAR home routers and extenders",
    "platform": "router",
    "affected_versions": "CBR40 (end of support)",
    "fixed_version": null,
    "fixed_min": null,
    "fix_note": "NETGEAR lists this model as 'Won't Fix'. Replace it.",
    "fixed_source_urls": [
     "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory"
    ],
    "check": {
     "menu_path": "Log in to your router (usually routerlogin.net). Look for Advanced > Administration > Firmware Update. Or use the NETGEAR Nighthawk or Orbi app.",
     "command": null,
     "shell": null,
     "read_only": null
    },
    "official_download": "https://www.netgear.com/support/download/"
   }
  ],
  "fix_steps": [
   "Find your router's model number on its label.",
   "Open your router's web page (often routerlogin.net) or the NETGEAR app.",
   "Go to Advanced > Administration > Firmware Update and let it check for an update.",
   "Turn on automatic updates if the router offers it.",
   "If your model is end-of-support or 'Won't Fix', plan to replace the router."
  ],
  "official_patch_links": [
   {
    "label": "NETGEAR: October 2026 security advisory",
    "url": "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory"
   },
   {
    "label": "NETGEAR: firmware downloads",
    "url": "https://www.netgear.com/support/download/"
   }
  ],
  "extra_checks": [],
  "sources": [
   {
    "url": "https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory",
    "title": "NETGEAR: October 2026 Security Advisory",
    "date": "2026-10",
    "kind": "vendor",
    "official": true
   },
   {
    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11732",
    "title": "NVD: CVE-2026-11732",
    "date": "2026-10-13",
    "kind": "nvd",
    "official": true
   }
  ]
 }
}