[ Vendor · 21 CVEs ]
NETGEAR
CVEs affecting NETGEAR published in the last 30 days, plus any NETGEAR CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-9218 | 13 Oct 2026 | CVSS 4.5 | NETGEAR CBR40Insufficient input validation vulnerability in time server (NTP) setting of the listed NETGEAR models allows an attacker who is connected to the… | |
| CVE-2026-11730 | 13 Oct 2026 | CVSS 5.4 | NETGEAR EX3700Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as… | |
| CVE-2026-11731 | 13 Oct 2026 | CVSS 8.8 | NETGEAR RAX30An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the… | |
| CVE-2026-11732 | 13 Oct 2026 | CVSS 8.8 | NETGEAR CAX30An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a… | |
| CVE-2026-107917 | 13 Oct 2026 | CVSS 4.5 | NETGEAR R7300DSTInsufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the… | |
| CVE-2026-107918 | 13 Oct 2026 | CVSS 4.5 | NETGEAR R7300DSTInsufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the… | |
| CVE-2020-26919 | 9 Oct 2020 | CVSS 9.8 | Netgear JGS516PE Devices Missing Function Level Access ControlNETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level. | Exploited |
| CVE-2020-26919 | 9 Oct 2020 | CVSS 9.8 | Netgear JGS516PE Devices Missing Function Level Access ControlNETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level. | Exploited |
| CVE-2017-6862 | 26 May 2017 | CVSS 9.8 | NETGEAR Multiple Devices Buffer OverflowNETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and… | Exploited |
| CVE-2016-1555 | 21 Apr 2017 | CVSS 9.8 | NETGEAR Multiple WAP Devices Command Injection(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and… | ExploitedFix |
| CVE-2016-1555 | 21 Apr 2017 | CVSS 9.8 | NETGEAR Multiple WAP Devices Command Injection(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and… | ExploitedFix |
| CVE-2017-6334 | 6 Mar 2017 | CVSS 8.8 | NETGEAR DGN2200 Devices OS Command Injectiondnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell… | Exploited |
| CVE-2017-6334 | 6 Mar 2017 | CVSS 8.8 | NETGEAR DGN2200 Devices OS Command Injectiondnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell… | Exploited |
| CVE-2017-6077 | 22 Feb 2017 | CVSS 9.8 | NETGEAR DGN2200 Remote Code Executionping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell… | Exploited |
| CVE-2017-6077 | 22 Feb 2017 | CVSS 9.8 | NETGEAR DGN2200 Remote Code Executionping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell… | Exploited |
| CVE-2016-10174 | 30 Jan 2017 | CVSS 9.8 | NETGEAR WNR2000v5 Router Buffer OverflowThe NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This… | Exploited |
| CVE-2016-10174 | 30 Jan 2017 | CVSS 9.8 | NETGEAR WNR2000v5 Router Buffer OverflowThe NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This… | Exploited |
| CVE-2017-5521 | 17 Jan 2017 | CVSS 8.1 | NETGEAR Multiple Devices Exposure of Sensitive InformationAn issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000… | Exploited |
| CVE-2017-5521 | 17 Jan 2017 | CVSS 8.1 | NETGEAR Multiple Devices Exposure of Sensitive InformationAn issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000… | Exploited |
| CVE-2016-6277 | 14 Dec 2016 | CVSS 8.8 | NETGEAR Multiple Routers Remote Code ExecutionNETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before… | ExploitedFix |
| CVE-2016-6277 | 14 Dec 2016 | CVSS 8.8 | NETGEAR Multiple Routers Remote Code ExecutionNETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before… | ExploitedFix |