🛡️Netgear Patches Four Router Flaws, But Several Models Are Now Unsupported

Check your Netgear router before someone else does

Netgear just disclosed three medium-severity flaws across a bunch of its routers and range extenders, and the fix is only half the story. Patches are out for supported models. The rest are end of life, which means no update is coming. If you're running a home lab, a small office, or a client's network on any of these boxes, this is your problem. The attack paths mostly require someone already inside your network, but that's a lower bar than it sounds once a laptop gets phished. The worst case is an attacker with local access hijacking an admin session on the web portal, or running commands on the router once they have the admin credentials. The details: CVE-2026-11732 hits the CAX30, RAX30, RAX5, and RAXE300, but only if Block Sites is turned on. CVE-2026-11731 lets an unauthenticated attacker view and change device settings on the RAX28, RAX29, and RAX30. CVE-2026-11730 targets the EX3700 and EX6120 extenders. All three are rated medium. The catch is that the RAX5 and EX3700 are end of service, and the CBR40 won't get a fix at all.