vciy

CVEs we hold for Netgear

Records whose assigning authority named Netgear as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-9216Insufficient input validation vulnerability exists in certain NETGEAR RAX ModelsNETGEAR RAXE300
CVE-2026-9215A CSRF vulnerability exists in certain NETGEAR XR series devicesNETGEAR XR500
CVE-2026-9214Insufficient input validation in NETGEAR R7000 router allows administrators to tamper with the device.NETGEAR R7000
CVE-2026-9213Insufficient input validation in certain NETGEAR routersNETGEAR XR1000
CVE-2026-9212Insufficient authentication and input validation in certain NETGEAR productsNETGEAR XR500
CVE-2026-9211Certain NETGEAR routers allow unauthenticated users to gain control of the routerNETGEAR RAXE300
CVE-2026-9210Certain NETGEAR routers allow authenticated administrators to gain unintended control of the routerNETGEAR XR1000
CVE-2026-62659Authenticated users can make unauthorized changes on NETGEAR WAX333 Access PointsNETGEAR WAX333
CVE-2026-62658Post-authentication Command Injection Vulnerability in certain Nighthawk RAX series modelsNETGEAR RAX54Sv2
CVE-2026-62657Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk modelsNETGEAR XR1000
CVE-2026-62656Post-authenticated command injection vulnerability found in certain NETGEAR RAX modelsNETGEAR RAXE500
CVE-2026-62655A DoS vulnerability due to stack overflow exists in certain NETGEAR Orbi modelsNETGEAR RBSE960
CVE-2026-3088Unauthenticated users can disrupt router operationNETGEAR RBSE960
CVE-2026-24714no title heldNETGEAR products
CVE-2026-15757Insufficient input validation vulnerability in NETGEAR DGND3700v1 modem routerNETGEAR DGND3700v1
CVE-2026-11814Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routersNETGEAR RS90
CVE-2026-11739Command injection vulnerability in some NETGEAR Nighthawk devicesNETGEAR XR1000v2
CVE-2026-11738Insufficient input validation in certain NETGEAR Nighthawk routers allows administrators to tamper with the device.NETGEAR RS700
CVE-2026-11737Some NETGEAR Nighthawk devices allow administrators to tamper with the deviceNETGEAR RAX54Sv2
CVE-2026-11736Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routersNETGEAR XR1000v2
CVE-2026-11735Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk modelsNETGEAR XR1000v2
CVE-2026-11734Device administrator can interrupt the normal operation of some NETGEAR Nighthawk devices.NETGEAR RAX54Sv2
CVE-2026-11733Buffer overflow vulnerability in some NETGEAR Nighthawk routersNETGEAR RAX54Sv2
CVE-2026-0420Missing TLS certificate validation in NETGEAR's ReadyCloud client appNETGEAR RAX40
CVE-2026-0419Insufficient input validation vulnerability in NETGEAR JR6150NETGEAR JR6150
CVE-2026-0418Certain NETGEAR devices allow administrators to tamper with systemNETGEAR XR1000
CVE-2026-0417Insufficient input validation in certain NETGEAR routersNETGEAR XR1000
CVE-2026-0416Improper input validation in certain NETGEAR routers allows unauthorized modification of protected router functionalityNETGEAR RAXE500
CVE-2026-0415Insufficient input validation vulnerability in certain Orbi routersNETGEAR RBSE960
CVE-2026-0414Insufficient Input Validation Allows Unauthorized Modification of Router Software in certain NETGEAR RoutersNETGEAR RBE970
CVE-2026-0413Buffer overflow vulnerability in certain NETGEAR Nighthawk routersNETGEAR RBSE960
CVE-2026-0412Insufficient input validation vulnerability in NETGEAR JR6150 Web UINETGEAR JR6150
CVE-2026-0411A Sensitive Information Disclosure Vulnerability in NETGEAR Orbi SatellitesNETGEAR RBS760
CVE-2026-0410Insufficient input validation in certain NETGEAR routersNETGEAR XR1000v2
CVE-2026-0409Netgear Orbi 370 Series Remote Code Execution vulnerabilityNETGEAR Orbi 370
CVE-2026-0408Path traversal vulnerability in Netgear WiFi Range ExtendersNETGEAR EX2800
CVE-2026-0407Authentication bypass in NETGEAR WiFi Range Extenders via network adjacent attacksNETGEAR EX2800
CVE-2026-0406Insufficient input validation in NETGEAR Nighthawk router XR1000v2NETGEAR XR1000v2
CVE-2026-0405Authentication Bypass in NETGEAR Orbi DevicesNETGEAR RBE374
CVE-2026-0404Insufficient input validation in NETGEAR Orbi routersNETGEAR RBS840
CVE-2026-0403Insufficient input validation in NETGEAR Orbi routersNETGEAR RBS860
CVE-2025-7407Netgear D6400 diag.cgi os command injectionNetgear D6400
CVE-2025-6565Netgear WNCE3001 HTTP POST Request http_d stack-based overflowNetgear WNCE3001
CVE-2025-6511Netgear EX6150 sub_410090 stack-based overflowNetgear EX6150
CVE-2025-6510Netgear EX6100 sub_415EF8 stack-based overflowNetgear EX6100
CVE-2025-5934Netgear EX3700 mtd sub_41619C stack-based overflowNetgear EX3700
CVE-2025-5495Netgear WNR614 URL improper authenticationNetgear WNR614
CVE-2025-4980Netgear DGND3700 mini_http currentsetting.htm information disclosureNetgear DGND3700
CVE-2025-4978Netgear DGND3700 Basic Authentication BRS_top.html improper authenticationNetgear DGND3700
CVE-2025-4977Netgear DGND3700 BRS_top.html information disclosureNetgear DGND3700
CVE-2025-4150Netgear EX6200 sub_54340 buffer overflowNetgear EX6200
CVE-2025-4149Netgear EX6200 sub_54014 buffer overflowNetgear EX6200
CVE-2025-4148Netgear EX6200 sub_503FC buffer overflowNetgear EX6200
CVE-2025-4147Netgear EX6200 sub_47F7C buffer overflowNetgear EX6200
CVE-2025-4146Netgear EX6200 sub_41940 buffer overflowNetgear EX6200
CVE-2025-4145Netgear EX6200 sub_3D0BC buffer overflowNetgear EX6200
CVE-2025-4142Netgear EX6200 sub_3C8EC buffer overflowNetgear EX6200
CVE-2025-4141Netgear EX6200 sub_3C03C buffer overflowNetgear EX6200
CVE-2025-4140Netgear EX6120 sub_30394 buffer overflowNetgear EX6120
CVE-2025-4139Netgear EX6120 fwAcosCgiInbound buffer overflowNetgear EX6120
CVE-2025-4135Netgear WG302v2 ui_get_input_value command injectionNetgear WG302v2
CVE-2025-4122Netgear JWNR2000v2 sub_435E04 command injectionNetgear JWNR2000v2
CVE-2025-4121Netgear JWNR2000v2 cmd_wireless command injectionNetgear JWNR2000v2
CVE-2025-4120Netgear JWNR2000v2 sub_4238E8 buffer overflowNetgear JWNR2000v2
CVE-2025-4117Netgear JWNR2000v2 sub_41A914 buffer overflowNetgear JWNR2000v2
CVE-2025-4116Netgear JWNR2000v2 get_cur_lang_ver buffer overflowNetgear JWNR2000v2
CVE-2025-4115Netgear JWNR2000v2 default_version_is_new buffer overflowNetgear JWNR2000v2
CVE-2025-4114Netgear JWNR2000v2 check_language_file buffer overflowNetgear JWNR2000v2
CVE-2025-25246no title heldNETGEAR XR500
CVE-2025-12946Improper input validation in NETGEAR Nighthawk routersNETGEAR MS90
CVE-2025-12945Improper input validation in NETGEAR Nighthawk router R7000PNETGEAR R7000P
CVE-2025-12944Improper input validation in NETGEAR DGN2200v4NETGEAR DGN2200v4
CVE-2025-12943Improper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE300NETGEAR RAXE300
CVE-2025-12942Improper input validation in NETGEAR R6260 and R6850NETGEAR R6850
CVE-2025-12941Denial of Service Vulnerability in NETGEAR C6220 and C6230NETGEAR C6230
CVE-2025-12940Credentials recorded in logs in NETGEAR WAX610 and WAX610YNETGEAR WAX610Y
CVE-2024-7153Netgear WN604 siteSurvey.php direct requestNetgear WN604
CVE-2024-6814NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution VulnerabilityNETGEAR ProSAFE Network Management System
CVE-2024-6813NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution VulnerabilityNETGEAR ProSAFE Network Management System
CVE-2024-6646Netgear WN604 Web Interface downloadFile.php information disclosureNetgear WN604
CVE-2024-5505NETGEAR ProSAFE Network Management System UpLoadServlet Directory Traversal Remote Code Execution VulnerabilityNETGEAR ProSAFE Network Management System
CVE-2024-5247NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution VulnerabilityNETGEAR ProSAFE Network Management System
CVE-2024-5246NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution VulnerabilityNETGEAR ProSAFE Network Management System
CVE-2024-5245NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation VulnerabilityNETGEAR ProSAFE Network Management System
CVE-2024-4235Netgear DG834Gv5 Web Management Interface cleartext storageNetgear DG834Gv5
CVE-2024-23690EOL Netgear FVS336v3 Telnet Configuration Backup Command InjectionNetgear FVS336Gv2
CVE-2024-1431Netgear R7000 Web Management Interface debuginfo.htm information disclosureNetgear R7000
CVE-2024-1430Netgear R7000 Web Management Interface currentsetting.htm information disclosureNetgear R7000
CVE-2024-12988Netgear R6900P/R7000P HTTP Header sub_16C4C buffer overflowNetgear R7000P
CVE-2024-12847NETGEAR DGN setup.cgi OS Command InjectionNETGEAR DGN1000
CVE-2024-12147Netgear R6900 HTTP Header upgrade_check.cgi buffer overflowNetgear R6900
CVE-2023-51635NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution VulnerabilityNETGEAR RAX30
CVE-2023-51634NETGEAR RAX30 Improper Certificate Validation Remote Code Execution VulnerabilityNETGEAR RAX30
CVE-2023-50231NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation VulnerabilityNETGEAR ProSAFE Network Management System
CVE-2023-49694NETGEAR ProSAFE Network Management System Privilege Escalation Via MySQL ServerNETGEAR ProSAFE Network Management System
CVE-2023-49693NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire ProtocolNETGEAR ProSAFE Network Management System
CVE-2023-48725no title heldNetgear RAX30
CVE-2023-44450NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution VulnerabilityNETGEAR ProSAFE Network Management System
CVE-2023-44449NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation VulnerabilityNETGEAR ProSAFE Network Management System
CVE-2023-44445NETGEAR CAX30 SSO Stack-based Buffer Overflow Remote Code Execution VulnerabilityNETGEAR CAX30
CVE-2023-41183NETGEAR Orbi 760 SOAP API Authentication Bypass VulnerabilityNETGEAR Orbi 760
CVE-2023-41182NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution VulnerabilityNETGEAR ProSAFE Network Management System
CVE-2023-40480NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution VulnerabilityNETGEAR RAX30
CVE-2023-40479NETGEAR RAX30 UPnP Command Injection Remote Code Execution VulnerabilityNETGEAR RAX30
CVE-2023-40478NETGEAR RAX30 Telnet CLI passwd Stack-based Buffer Overflow Remote Code Execution VulnerabilityNETGEAR RAX30
CVE-2023-38102NETGEAR ProSAFE Network Management System createUser Missing Authorization Privilege Escalation VulnerabilityNETGEAR ProSAFE Network Management System
CVE-2023-38101NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution…NETGEAR ProSAFE Network Management System
CVE-2023-38100NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation VulnerabilityNETGEAR ProSAFE Network Management System
CVE-2023-38099NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution VulnerabilityNETGEAR ProSAFE Network Management System
CVE-2023-38098NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution VulnerabilityNETGEAR ProSAFE Network Management System
CVE-2023-38097NETGEAR ProSAFE Network Management System BkreProcessThread Exposed Dangerous Function Remote Code Execution…NETGEAR ProSAFE Network Management System
CVE-2023-38096NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass VulnerabilityNETGEAR ProSAFE Network Management System
CVE-2023-38095NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution…NETGEAR ProSAFE Network Management System
CVE-2023-35722NETGEAR RAX30 UPnP Command Injection Remote Code Execution VulnerabilityNETGEAR RAX30
CVE-2023-35721NETGEAR Multiple Routers curl_post Improper Certificate Validation Remote Code Execution VulnerabilityNETGEAR Multiple Routers
CVE-2023-34285NETGEAR RAX30 cmsCli_authenticate Stack-based Buffer Overflow Remote Code Execution VulnerabilityNETGEAR RAX30
CVE-2023-34284NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass VulnerabilityNETGEAR RAX30
CVE-2023-34283NETGEAR RAX30 USB Share Link Following Information Disclosure VulnerabilityNETGEAR RAX30
CVE-2023-28338no title heldn/a NETGEAR Nighthawk WiFi6 Router (RAX30)
CVE-2023-28337no title heldn/a NETGEAR Nighthawk WiFi6 Router (RAX30)
CVE-2023-27853no title heldn/a NETGEAR Nighthawk WiFi6 Router
CVE-2023-27852no title heldn/a NETGEAR Nighthawk WiFi6 Router
CVE-2023-27851no title heldn/a NETGEAR Nighthawk WiFi6 Router
CVE-2023-27850no title heldn/a NETGEAR Nighthawk WiFi6 Router
CVE-2023-27370NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure VulnerabilityNETGEAR RAX30
CVE-2023-27369NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass VulnerabilityNETGEAR RAX30
CVE-2023-27368NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass VulnerabilityNETGEAR RAX30
CVE-2023-27367NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution VulnerabilityNETGEAR RAX30
CVE-2023-27361NETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityNETGEAR RAX30
CVE-2023-27360NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution VulnerabilityNETGEAR RAX30
CVE-2023-27358NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution VulnerabilityNETGEAR RAX30
CVE-2023-27357NETGEAR RAX30 GetInfo Missing Authentication Information Disclosure VulnerabilityNETGEAR RAX30
CVE-2023-27356NETGEAR RAX30 logCtrl Command Injection Remote Code Execution VulnerabilityNETGEAR RAX30
CVE-2023-24498Netgear ProSAFE 24 Port 10/100 FS726TP - CWE-522: Insufficiently Protected Credentials.Netgear ProSAFE 24 Port 10/100 FS726TP
CVE-2023-2396Netgear SRX5308 Web Management Interface cross site scriptingNetgear SRX5308
CVE-2023-2395Netgear SRX5308 Web Management Interface cross site scriptingNetgear SRX5308
CVE-2023-2394Netgear SRX5308 Web Management Interface cross site scriptingNetgear SRX5308
CVE-2023-2393Netgear SRX5308 Web Management Interface cross site scriptingNetgear SRX5308
CVE-2023-2392Netgear SRX5308 Web Management Interface cross site scriptingNetgear SRX5308
CVE-2023-2391Netgear SRX5308 Web Management Interface cross site scriptingNetgear SRX5308
CVE-2023-2390Netgear SRX5308 Web Management Interface cross site scriptingNetgear SRX5308
CVE-2023-2389Netgear SRX5308 Web Management Interface cross site scriptingNetgear SRX5308
CVE-2023-2388Netgear SRX5308 Web Management Interface cross site scriptingNetgear SRX5308
CVE-2023-2387Netgear SRX5308 Web Management Interface cross site scriptingNetgear SRX5308
CVE-2023-2386Netgear SRX5308 Web Management Interface cross site scriptingNetgear SRX5308
CVE-2023-2385Netgear SRX5308 Web Management Interface cross site scriptingNetgear SRX5308
CVE-2023-2384Netgear SRX5308 Web Management Interface cross site scriptingNetgear SRX5308
CVE-2023-2383Netgear SRX5308 Web Management Interface cross site scriptingNetgear SRX5308
CVE-2023-2382Netgear SRX5308 Web Management Interface cross site scriptingNetgear SRX5308
CVE-2023-2381Netgear SRX5308 Web Management Interface cross site scriptingNetgear SRX5308
CVE-2023-2380Netgear SRX5308 denial of serviceNetgear SRX5308
CVE-2023-1327no title heldn/a Netgear RAX30 (AX2400)
CVE-2023-1205no title heldn/a NETGEAR Nighthawk WiFi6 Router
CVE-2023-0850Netgear WNDR3700v2 Web Interface denial of serviceNetgear WNDR3700v2
CVE-2023-0849Netgear WNDR3700v2 Web Interface command injectionNetgear WNDR3700v2
CVE-2023-0848Netgear WNDR3700v2 Web Management Interface denial of serviceNetgear WNDR3700v2
CVE-2022-47210no title heldn/a NETGEAR Nighthawk WiFi6 Router
CVE-2022-47209no title heldn/a NETGEAR Nighthawk WiFi6 Router
CVE-2022-47208no title heldn/a NETGEAR Nighthawk WiFi6 Router
CVE-2022-4390no title heldn/a NETGEAR Nighthawk RAX30
CVE-2022-43654NETGEAR CAX30S SSO Command Injection Remote Code Execution VulnerabilityNETGEAR CAX30S
CVE-2022-38458no title heldNetgear Orbi Router RBR750
CVE-2022-38452no title heldNetgear Orbi Router RBR750
CVE-2022-37337no title heldNetgear Orbi Router RBR750
CVE-2022-36429no title heldNetgear Orbi Satellite RBS750
CVE-2022-27647no title heldNETGEAR R6700v3
CVE-2022-27646no title heldNETGEAR R6700v3
CVE-2022-27645no title heldNETGEAR R6700v3
CVE-2022-27644no title heldNETGEAR R6700v3
CVE-2022-27643no title heldNETGEAR R6700v3
CVE-2022-27642no title heldNETGEAR R6700v3
CVE-2022-27641no title heldNETGEAR R6700v3
CVE-2021-45732no title heldn/a Netgear Nighthawk R6700
CVE-2021-45077no title heldn/a Netgear Nighthawk R6700
CVE-2021-34991no title heldNETGEAR R6400v2
CVE-2021-34983NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure VulnerabilityNETGEAR Multiple Routers
CVE-2021-34982NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution VulnerabilityNETGEAR Multiple Routers
CVE-2021-34980no title heldNETGEAR R6260
CVE-2021-34979no title heldNETGEAR R6260
CVE-2021-34978no title heldNETGEAR R6260
CVE-2021-34977no title heldNETGEAR R7000
CVE-2021-34947NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution VulnerabilityNETGEAR R7800
CVE-2021-34870no title heldNETGEAR XR1000
CVE-2021-34865no title heldNETGEAR Multiple Routers
CVE-2021-27276no title heldNETGEAR ProSAFE Network Management System
CVE-2021-27275no title heldNETGEAR ProSAFE Network Management System
CVE-2021-27274no title heldNETGEAR ProSAFE Network Management System
CVE-2021-27273no title heldNETGEAR ProSAFE Network Management System
CVE-2021-27272no title heldNETGEAR ProSAFE Network Management System
CVE-2021-27257no title heldNETGEAR R7800
CVE-2021-27256no title heldNETGEAR R7800
CVE-2021-27255no title heldNETGEAR R7800
CVE-2021-27254no title heldNETGEAR R7800
CVE-2021-27253no title heldNETGEAR R7800
CVE-2021-27252no title heldNETGEAR R7800
CVE-2021-27251no title heldNETGEAR R7800
CVE-2021-27239no title heldNETGEAR Multiple Routers
CVE-2021-23147no title heldn/a Netgear Nighthawk R6700
CVE-2021-20175no title heldn/a Netgear Nighthawk R6700
CVE-2021-20174no title heldn/a Netgear Nighthawk R6700

200 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.