Filtered by vendor Netgear Subscriptions
Total 1366 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-12945 1 Netgear 2 R7000p, R7000p Firmware 2026-08-26 2.4 Low
An improper input validation vulnerability in the NETGEAR Nighthawk R7000P (end of service) routers lets an authenticated administrator with local network access to the device, to execute OS command injections and make unauthorized modifications to the router software and functionality impacting its integrity. There is no additional impact to confidentiality or availability. This issue affects R7000P: through 1.3.3.154.
CVE-2026-62658 1 Netgear 5 Rax43, Rax45, Rax50 and 2 more 2026-08-05 N/A
A security flaw was discovered in certain NETGEAR Nighthawk RAX series routers that could allow someone already logged in to the device to run unauthorized commands or code on the router.
CVE-2026-62659 1 Netgear 1 Wax333 2026-08-05 N/A
A security flaw was discovered in the NETGEAR WAX333 Access Point that could allow someone already logged in and connected to the local network to make unauthorized changes to the device's settings
CVE-2026-15757 1 Netgear 1 Dgnd3700 2026-08-05 N/A
A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send unauthorized commands to the device. This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.
CVE-2026-62655 1 Netgear 8 Rbe970, Rbe971, Rbr860 and 5 more 2026-07-16 N/A
A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to stop responding or restart unexpectedly, disrupting network connectivity and making the device temporarily unavailable.
CVE-2026-62657 1 Netgear 4 Mr70, Ms70, Raxe500 and 1 more 2026-07-15 N/A
A security flaw in the router's certificate validation process was discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take control of the device.
CVE-2026-62656 1 Netgear 2 Raxe450, Raxe500 2026-07-15 N/A
A security flaw was found in certain NETGEAR RAX models that could allow a logged-in user to send specially crafted requests to the router and run unauthorized commands. This could enable the user to make unauthorized changes to the router and affect its security and operation.
CVE-2026-9213 1 Netgear 8 Mr70, Mr70 Firmware, Ms70 and 5 more 2026-06-11 8.1 High
A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamper with traffic between the router and the Internet, to execute code on the device.
CVE-2026-9212 1 Netgear 47 Lbr1020, Lbr1020 Firmware, Lbr20 and 44 more 2026-06-11 8.0 High
Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.
CVE-2026-9211 1 Netgear 8 Cax30, Cax30 Firmware, Rax30 and 5 more 2026-06-10 8.8 High
An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation.
CVE-2026-9210 1 Netgear 62 Ex3700, Ex3700 Firmware, Ex3800 and 59 more 2026-06-10 4.5 Medium
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
CVE-2026-3088 1 Netgear 18 Rbe970, Rbe970 Firmware, Rbe971 and 15 more 2026-06-10 6.5 Medium
Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.
CVE-2026-0409 1 Netgear 1 Orbi 370 2026-06-09 N/A
A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the router and the Internet to run commands on your device when the device administrator performs certain specific management actions. This issue affects NETGEAR Orbi 370 series devices before V12.1.2.7.
CVE-2026-0417 1 Netgear 27 Mr60, Mr70, Mr80 and 24 more 2026-06-09 N/A
Insufficient input validation vulnerability in NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity.
CVE-2026-0418 1 Netgear 35 Cbr750, Ex6120, Ex6130 and 32 more 2026-06-09 N/A
Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.
CVE-2026-0413 1 Netgear 14 Rbe37x, Rbe77x, Rbr750 and 11 more 2026-06-09 N/A
Insufficient input validation of buffers vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
CVE-2026-0414 1 Netgear 1 Rbe97x 2026-06-09 N/A
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
CVE-2026-0415 1 Netgear 13 Rbe97x, Rbr750, Rbr840 and 10 more 2026-06-09 N/A
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
CVE-2026-0411 1 Netgear 4 Rbe97x, Rbr350, Rbr760 and 1 more 2026-06-09 N/A
An information disclosure vulnerability in the NETGEAR Orbi satellites could allow a user connected to your network to gain administrator access to the Orbi router. The listed NETGEAR models are affected by this vulnerability. Orbi WiFi Systems without satellite devices are not impacted by this issue.
CVE-2026-0410 1 Netgear 19 R7000, Rax20, Rax35v2 and 16 more 2026-06-09 N/A
Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.