Filtered by vendor Netgear Subscriptions
Total 1343 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-0409 1 Netgear 1 Orbi 370 2026-06-09 N/A
A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the router and the Internet to run commands on your device when the device administrator performs certain specific management actions. This issue affects NETGEAR Orbi 370 series devices before V12.1.2.7.
CVE-2026-9213 1 Netgear 4 Mr70, Ms70, Raxe500 and 1 more 2026-06-09 N/A
A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamper traffic between the router and the Internet, to execute code on the device.
CVE-2026-3088 1 Netgear 8 Rbr860, Rbre950, Rbre960 and 5 more 2026-06-09 N/A
Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.
CVE-2026-9211 1 Netgear 4 Cax30, Rax30, Rax5 and 1 more 2026-06-09 N/A
An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation.
CVE-2026-9210 1 Netgear 31 Ex3700, Ex3800, Ex6120 and 28 more 2026-06-09 N/A
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
CVE-2026-0417 1 Netgear 27 Mr60, Mr70, Mr80 and 24 more 2026-06-09 N/A
Insufficient input validation vulnerability in NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity.
CVE-2026-0418 1 Netgear 35 Cbr750, Ex6120, Ex6130 and 32 more 2026-06-09 N/A
Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.
CVE-2026-0413 1 Netgear 14 Rbe37x, Rbe77x, Rbr750 and 11 more 2026-06-09 N/A
Insufficient input validation of buffers vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
CVE-2026-0414 1 Netgear 1 Rbe97x 2026-06-09 N/A
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
CVE-2026-0415 1 Netgear 13 Rbe97x, Rbr750, Rbr840 and 10 more 2026-06-09 N/A
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
CVE-2026-0411 1 Netgear 4 Rbe97x, Rbr350, Rbr760 and 1 more 2026-06-09 N/A
An information disclosure vulnerability in the NETGEAR Orbi satellites could allow a user connected to your network to gain administrator access to the Orbi router. The listed NETGEAR models are affected by this vulnerability. Orbi WiFi Systems without satellite devices are not impacted by this issue.
CVE-2026-9212 1 Netgear 25 Lbr1020, Lbr20, R6700ax and 22 more 2026-06-09 N/A
Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting product's confidentiality or change certain configurations.
CVE-2026-0410 1 Netgear 19 R7000, Rax20, Rax35v2 and 16 more 2026-06-09 N/A
Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.
CVE-2026-0419 1 Netgear 1 Jr6150 2026-06-09 N/A
Insufficient input validation in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows users connected to the local WiFi Networks to execute operating system commands. NETGEAR JR6150 has reached End-of-Support phase as of 2018 , and no further security updates are planned. NETGEAR strongly recommends replacing these devices with newer NETGEAR models to ensure continued security support and updates. This vulnerability has been identified through firmware emulation in a controlled research environment and has not been verified on production hardware.
CVE-2026-0416 1 Netgear 2 Raxe450, Raxe500 2026-06-09 N/A
Authenticated administrators connected to the local network can modify router functionality beyond what is intended through the standard management interface.
CVE-2026-0412 1 Netgear 1 Jr6150 2026-06-09 N/A
Insufficient input validation vulnerability in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows administrators connected to the local network to make unauthorized modification of router software and functionality. NETGEAR JR6150 reached End-of-Support status in 2018 and is no longer receiving security updates. NETGEAR strongly recommends replacing these devices with newer NETGEAR models to ensure continued security support and updates. This vulnerability has been identified through firmware emulation in a controlled research environment and has not been verified on production hardware.
CVE-2026-0420 1 Netgear 5 Rax120v1, Rax120v2, Rax35 and 2 more 2026-06-09 N/A
An improper implementation of TLS certificate validation vulnerability found in ReadyCloud client app which can allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting product's confidentiality. This vulnerability affects the listed NETGEAR models.
CVE-2008-6122 1 Netgear 1 Wgr614 2026-04-23 N/A
The web management interface in Netgear WGR614v9 allows remote attackers to cause a denial of service (crash) via a request that contains a question mark ("?").
CVE-2006-6059 1 Netgear 1 Ma521 Driver 2026-04-23 N/A
Buffer overflow in MA521nd5.SYS driver 5.148.724.2003 for NetGear MA521 PCMCIA adapter allows remote attackers to execute arbitrary code via (1) beacon or (2) probe 802.11 frame responses with an long supported rates information element. NOTE: this issue was reported as a "memory corruption" error, but the associated exploit code suggests that it is a buffer overflow.
CVE-2009-2257 1 Netgear 1 Dg632 2026-04-23 N/A
The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to bypass authentication via a direct request to (1) gateway/commands/saveconfig.html, and (2) stattbl.htm, (3) modemmenu.htm, (4) onload.htm, (5) form.css, (6) utility.js, and possibly (7) indextop.htm in html/.