Netgear patches router vulnerabilities, flags older models as unsupported

Vulnerabilities and patches

Netgear has identified and patched security vulnerabilities in several of its router models. The flaws, classified as medium severity, could allow attackers with local network access to execute unauthorized commands or alter device settings. Patches have been released for all supported models, including popular WiFi 6 and WiFi 6E devices.

End-of-service models left exposed

Several older Netgear routers and range extenders have reached end-of-service (EoS) status and will not receive further updates. Models such as the RAX5 4-Stream AX1600 WiFi 6 Router, EX3700 AC750 WiFi Range Extender, R7300DST Nighthawk AC1900 DST Router & Adapter, and CBR40 Orbi AC2200 Tri-band WiFi Cable Modem Router are among those affected. Netgear has advised users of these devices to upgrade to newer models to maintain security.

How the flaws could be exploited

The vulnerabilities require an attacker to have access to the local network. One flaw, CVE-2026-11732, could allow unauthorized command execution if the "Block Sites" feature is enabled. Another, CVE-2026-11731, could let an unauthenticated attacker modify device settings. A third, CVE-2026-11730, affects two range extenders and could enable session hijacking on the web management portal. A fourth, CVE-2026-9218, could allow command execution if the attacker has the administrator credentials.

What this means

Lazyfounder analysis — our interpretation, not reported fact.

For founders and operators running small businesses or managing remote teams, this story underscores the risks of neglecting hardware lifecycle management. Routers are a critical but often overlooked part of IT infrastructure. Relying on unsupported devices creates a hidden attack surface that can be exploited by malicious actors with local network access—such as compromised employee devices or guests on a shared network.

The EoS status of several Netgear models also signals a broader trend: consumer-grade networking hardware is not designed for long-term enterprise use. Founders who prioritize cost savings over security may face unexpected upgrade costs or, worse, breaches that disrupt operations. This is especially relevant for startups in India, where remote work and small office setups often rely on off-the-shelf routers.

The patches themselves are a reminder that even supported devices require regular maintenance. Automating firmware updates—or at least setting calendar reminders—can reduce exposure to known threats.

Related on Lazyfounder

• Netgear
• More technology news
• What Netgear router lights mean and how to fix common issues