Netgear patches three flaws in its routers and extenders. Update now. From PC World: According to a recently published security advisory report, Netgear has discovered several vulnerabilities in its networking products. All are classified as moderately severe, and the company has now released updates to patch the security holes. One of the vulnerabilities (CVE-2026-11732) affects the CAX30, RAX30, RAX5, and RAXE300 models. It can be exploited by an attacker who already has access to the local network, for example via the Wi-Fi password. The attacker can then execute unauthorized commands on the router. This vulnerability only exists when the website blocking feature is enabled. Another vulnerability (CVE-2026-11731) affects the RAX28, RAX29, and RAX30 models. This one allows an attacker with local access to the router's admin interface to bypass login and modify certain settings. Meanwhile, the EX3700 and EX6120 models of Netgear's Wi-Fi extenders are also affected by a vulnerability (CVE-2026-11730) that could be exploited to hijack a logged-in administrator session. Netgear has released updates for the affected models and recommends that users install the latest firmware as soon as possible. The company also urges users to enable automatic updates where possible.

Netgear patches three flaws in its routers and extenders. Update now. Oct 29, 2026 Netgear fixed security flaws in the RAX30, RAX28, RAX29, CAX30, RAXE300, and more. See if your router or extender is on the list. Summary created by Smart Answers AI In summary: * PCWorld reports that Netgear has patched three security flaws affecting several routers and extenders, including the CAX30, RAX30, RAX5, RAXE300, and EX3700 models. * The vulnerabilities are serious, allowing attackers to remotely execute commands or bypass admin login credentials, putting home networks at risk. * Users should install the latest firmware immediately, and those with unsupported models like the R7000 should consider replacing their hardware entirely. According to a recently published security advisory report, Netgear has discovered several vulnerabilities in its networking products. All are classified as moderately severe, and the company has now released updates to patch the security holes. One of the vulnerabilities (CVE-2026-11732) affects the CAX30, RAX30, RAX5, and RAXE300 models. It can be exploited by an attacker who already has access to the local network, for example via the Wi-Fi password. The attacker can then execute unauthorized commands on the router. This vulnerability only exists when the website blocking feature is enabled. Another vulnerability (CVE-2026-11731) affects the RAX28, RAX29, and RAX30 models. This one allows an attacker with local access to the router's admin interface to bypass login and modify certain settings. Meanwhile, the EX3700 and EX6120 models of Netgear's Wi-Fi extenders are also affected by a vulnerability (CVE-2026-11730) that could be exploited to hijack a logged-in administrator session. Netgear has released updates for the affected models and recommends that users install the latest firmware as soon as possible. The company also urges users to enable automatic updates where possible. A handful of other vulnerabilities were also included in the security advisory, including CVE-2026-9218, CVE-2026-107918, and CVE-2026-107917. These only affect no longer supported models like the R7000, RAX40, and R7300DST. All unsupported models, including the RAX5 and EX3700, will no longer receive security updates. In such cases, Netgear recommends replacing these with newer products. Sponsored Content Sponsored by MSI Web Editor, Sweden Andreas has worked as a technology journalist for many years. Andreas's interest in technology started with the Nokia 6110 about a thousand years ago, and today he follows AI development with both delight and horror. Senior Editor, PCWorld Joel is a Senior Editor at PCWorld and has been writing/editing consumer technology content for over 12 years. He's been with PCWorld since 2024 and writes about digital security and other computer-related topics. He was previously the Editor in Chief of MakeUseOf from 2018 to 2021 and the Founder/Editor of whatNerd. He has a B.S. in Computer Science.

Bitdefender and NETGEAR 2026 IoT report reveals growing threat exposure throughout the connected home. 28 October 2026 Global Analysis of 5.4 Billion Security Events Finds Homes Now Average 24 Connected Devices That Can Serve as Targets, Proxies, Sensors, and Footholds BUCHAREST, Romania and SAN ANTONIO, TX - Bitdefender, a global cybersecurity leader, today released joint research with NETGEAR titled the 2026 IoT Security Landscape Report, an in-depth look at how threats to connected homes are evolving. The research details how the growing Internet of Things (IoT) ecosystem, from smart TVs and streaming boxes to routers and cameras, has expanded consumer exposure to automated cyberattacks and large-scale exploitation. It also finds that these devices are now more than targets, serving as proxies, sensors, and footholds inside the home. "The increase in connected devices has turned homes into complex digital ecosystems, and every addition gives attackers another doorway in," said Ciprian Istrate, senior vice president of operations at Bitdefender Consumer Solutions Group. "Cybercriminals are using AI to speed attacks on newly discovered vulnerabilities from days to a matter of hours, putting families at far greater risk. Our research with NETGEAR shows that router-level protection is now critical for defending against malware, identity theft, and increasingly sophisticated scams." The 2026 IoT Security Landscape Report draws on telemetry from roughly 10.4 million smart homes globally, collected from January through September 2026. Bitdefender researchers analyzed 5.4 billion security events and 1.2 billion vulnerability observations. The report also examines the year's landmark incidents, including the dismantling of four IoT botnets by the U.S. Department of Justice and the discovery of proxy software bundled into smart TV apps, which can turn televisions into relays for third-party traffic. Key findings from the 2026 IoT Security Landscape Report include: * One device, four attack opportunities - The same vulnerable device can be a target for direct attack, a proxy that relays third-party traffic, a sensor that gathers information, or a foothold into the wider network. Smart TVs, where all four roles converge, led all categories with 270.3 million vulnerability observations, showing how an ordinary product can create risks beyond itself. * Connected device counts climb as reconnaissance leads attack types - The average household now has 24 connected devices, up from 22 last year. Reconnaissance made up 90.1% of detected attack activity, with automated scans identifying weakly secured networks and devices for larger attacks or botnet recruitment. * Televisions, plugs, and storage are most exposed - Smart TVs (22.7%), smart plugs (22.4%), and network-attached storage (22%) account for 67.1% of vulnerability observations. Compared with 2025, when streaming devices (25.9%) and smart TVs (21.3%) led the list, the findings signal that long-lived devices that are rarely replaced and often remain online beyond their update and support windows carry the greatest vulnerability burden. * Nearly all observed device vulnerabilities are publicly known - Flaws cataloged as Common Vulnerabilities and Exposures (CVEs) account for 99.97% of the total, while weak passwords and plaintext authentication make up a fraction of one percent. This finding reinforces the need for timely patching and better device management. * Phones and TVs top the list of connected devices - Mobile phones account for 20.4% of the devices identified on home networks, followed by TVs (10.6%), computers (10.0%), network equipment (6.2%), and streaming devices (5.4%, down from 7.3% in 2025). Tablets (4.8%) and IP cameras (4.1%) follow. * Memory errors and service disruption lead potential attack outcomes - Overflow errors account for about 54%, followed by denial-of-service (about 18%) and memory corruption (about 17%), which point to weak memory safety and input validation in device software. The most serious outcomes, giving attackers control of a device or its data, are far less common: privilege escalation (5.3%), code execution (3.8%), and obtaining information (1.2%), about 10.3% combined. "A connected home depends on more than speed, coverage, and reliability. It also depends on the visibility and protection that services such as NETGEAR Armor(TM) powered by Bitdefender(R) bring to activity across the network, plus security at the router level," said Chandan Nandakumaraiah, head of product and cybersecurity at NETGEAR and member of the CVE Board. "As enterprises get better at protecting their digital infrastructure, cybercriminals are turning to connected home devices. These devices are increasingly smart and powerful, which makes them an ideal foothold: always on, reliable, and rarely monitored. Once inside, criminals can stay hidden and move laterally across the home network. Monitoring, detecting, and blocking these threats is more important than ever." Bitdefender and NETGEAR continue to address these challenges through NETGEAR Armor(TM) powered by Bitdefender(R), a built-in security platform available on NETGEAR's Nighthawk routers and Orbi Mesh WiFi systems. Armor helps detect and block known and emerging threats, identify vulnerabilities, and safeguard users against phishing, data theft, and other attacks - helping families maintain a safer, more resilient smart home environment. To download a copy of the full 2026 IoT Security Landscape Report, visit its website.