NETGEAR

Latest CVEs · RSS

• CVE-2026-107918 2026-10-13 · CVSS 4.3
  Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network
• CVE-2026-107917 2026-10-13 · CVSS 4.3
  Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local networ
• CVE-2026-11732 2026-10-13 · CVSS 6.3
  An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attac
• CVE-2026-11731 2026-10-13 · CVSS 6.3
  An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s
• CVE-2026-11730 2026-10-13 · CVSS 2.1
  Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi crede
• CVE-2026-9218 2026-10-13 · CVSS 4.3
  Insufficient input validation vulnerability in time server (NTP) setting of the listed NETGEAR models allows an attacker who is connected to the router’s local
• CVE-2026-9216 2026-09-08 · CVSS 1.2
  An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi cr
• CVE-2026-9215 2026-09-08 · CVSS 1.8
  A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router adm
• CVE-2026-9214 2026-08-11 · CVSS 4.3
  Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorize
• CVE-2026-11736 2026-08-11 · CVSS 1.9
  A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router soft
• CVE-2026-11735 2026-08-11 · CVSS 1.9
  A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the rout
• CVE-2026-11738 2026-08-11 · CVSS 4.3
  Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized
• CVE-2026-11739 2026-08-11 · CVSS 4.9
  A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify lo
• CVE-2026-11734 2026-08-11 · CVSS 1.1
  A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.
• CVE-2026-11733 2026-08-11 · CVSS 1.1
  A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.
• CVE-2026-11737 2026-08-11 · CVSS 4.3
  Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthoriz
• CVE-2026-11814 2026-08-11 · CVSS 4.9
  A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic
• CVE-2026-62659 2026-07-14 · CVSS 4.3
  A security flaw was discovered in the NETGEAR WAX333 Access Point that could allow someone already logged in and connected to the local network to make unauthor
• CVE-2026-15757 2026-07-14 · CVSS 6.3
  A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send unauthorized commands to the device.
• CVE-2026-62656 2026-07-14 · CVSS 5.4
  A security flaw was found in certain NETGEAR RAX models that could allow a logged-in user to send specially crafted requests to the router and run unauthorized
• CVE-2026-62655 2026-07-14 · CVSS 5.7
  A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to stop responding or restart unexpectedly, d
• CVE-2026-62657 2026-07-14 · CVSS 4.9
  A security flaw in the router's certificate validation process was discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow
• CVE-2026-62658 2026-07-14 · CVSS 4.7
  A security flaw was discovered in certain NETGEAR Nighthawk RAX series routers that could allow someone already logged in to the device to run unauthorized comm
• CVE-2026-0420 2026-06-09 · CVSS 4.6
  An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attacke
• CVE-2026-9212 2026-06-09 · CVSS 5.6
  Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the produ