# cve.now: NETGEAR

The newest entries naming NETGEAR as an affected vendor (up to 200), of 219 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-123180](https://cve.now/CVE-2026-123180.md): Missing Authentication Vulnerability in NETGEAR Nighthawk RAX30 models (CVSS 6.3)
- [CVE-2026-123178](https://cve.now/CVE-2026-123178.md): Insufficient Input Validation Vulnerability in NETGEAR Orbi RBR350 (CVSS 4.3)
- [CVE-2026-107918](https://cve.now/CVE-2026-107918.md): Insufficient input validation vulnerability in NETGEAR R7300 (CVSS 4.3)
- [CVE-2026-107917](https://cve.now/CVE-2026-107917.md): Insufficient input validation vulnerability in NETGEAR R7300 router (CVSS 4.3)
- [CVE-2026-11732](https://cve.now/CVE-2026-11732.md): Insufficient input validation vulnerability exists in website blocking feature of certain NETGEAR RAX/CAX series models (CVSS 6.3)
- [CVE-2026-11731](https://cve.now/CVE-2026-11731.md): Authentication Bypass Vulnerability in Certain NETGEAR RAX Series Models (CVSS 6.3)
- [CVE-2026-11730](https://cve.now/CVE-2026-11730.md): Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models (CVSS 2.1)
- [CVE-2026-9218](https://cve.now/CVE-2026-9218.md): Insufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized access (CVSS 4.3)
- [CVE-2026-9216](https://cve.now/CVE-2026-9216.md): Insufficient input validation vulnerability exists in certain NETGEAR RAX Models (CVSS 1.2)
- [CVE-2026-9215](https://cve.now/CVE-2026-9215.md): A CSRF vulnerability exists in certain NETGEAR XR series devices (CVSS 1.8)
- [CVE-2026-9214](https://cve.now/CVE-2026-9214.md): Insufficient input validation in NETGEAR R7000 router allows administrators to tamper with the device. (CVSS 4.3)
- [CVE-2026-11736](https://cve.now/CVE-2026-11736.md): Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers (CVSS 1.9)
- [CVE-2026-11735](https://cve.now/CVE-2026-11735.md): Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models (CVSS 1.9)
- [CVE-2026-11738](https://cve.now/CVE-2026-11738.md): Insufficient input validation in certain NETGEAR Nighthawk routers allows administrators to tamper with the device. (CVSS 4.3)
- [CVE-2026-11739](https://cve.now/CVE-2026-11739.md): Command injection vulnerability in some NETGEAR Nighthawk devices (CVSS 4.9)
- [CVE-2026-11734](https://cve.now/CVE-2026-11734.md): Device administrator can interrupt the normal operation of some NETGEAR Nighthawk devices. (CVSS 1.1)
- [CVE-2026-11733](https://cve.now/CVE-2026-11733.md): Buffer overflow vulnerability in some NETGEAR Nighthawk routers (CVSS 1.1)
- [CVE-2026-11737](https://cve.now/CVE-2026-11737.md): Some NETGEAR Nighthawk devices allow administrators to tamper with the device (CVSS 4.3)
- [CVE-2026-11814](https://cve.now/CVE-2026-11814.md): Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers (CVSS 4.9)
- [CVE-2026-62659](https://cve.now/CVE-2026-62659.md): Authenticated users can make unauthorized changes on NETGEAR WAX333 Access Points (CVSS 4.3)
- [CVE-2026-15757](https://cve.now/CVE-2026-15757.md): Insufficient input validation vulnerability in NETGEAR DGND3700v1 modem router (CVSS 6.3)
- [CVE-2026-62656](https://cve.now/CVE-2026-62656.md): Post-authenticated command injection vulnerability found in certain NETGEAR RAX models (CVSS 5.4)
- [CVE-2026-62655](https://cve.now/CVE-2026-62655.md): A DoS vulnerability due to stack overflow exists in certain NETGEAR Orbi models (CVSS 5.7)
- [CVE-2026-62657](https://cve.now/CVE-2026-62657.md): Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models (CVSS 4.9)
- [CVE-2026-62658](https://cve.now/CVE-2026-62658.md): Post-authentication Command Injection Vulnerability in certain Nighthawk RAX series models (CVSS 4.7)
- [CVE-2026-0420](https://cve.now/CVE-2026-0420.md): Missing TLS certificate validation in NETGEAR's ReadyCloud client app (CVSS 4.6)
- [CVE-2026-9212](https://cve.now/CVE-2026-9212.md): Insufficient authentication and input validation in certain NETGEAR products (CVSS 5.6)
- [CVE-2026-0411](https://cve.now/CVE-2026-0411.md): A Sensitive Information Disclosure Vulnerability in NETGEAR Orbi Satellites (CVSS 4.2)
- [CVE-2026-0415](https://cve.now/CVE-2026-0415.md): Insufficient input validation vulnerability in certain Orbi routers (CVSS 4.3)
- [CVE-2026-0414](https://cve.now/CVE-2026-0414.md): Insufficient Input Validation Allows Unauthorized Modification of Router Software in certain NETGEAR Routers (CVSS 4.3)
- [CVE-2026-0413](https://cve.now/CVE-2026-0413.md): Buffer overflow vulnerability in certain NETGEAR Nighthawk routers (CVSS 4.3)
- [CVE-2026-0418](https://cve.now/CVE-2026-0418.md): Certain NETGEAR devices allow administrators to tamper with system (CVSS 4.3)
- [CVE-2026-0417](https://cve.now/CVE-2026-0417.md): Insufficient input validation in certain NETGEAR routers (CVSS 4.3)
- [CVE-2026-9210](https://cve.now/CVE-2026-9210.md): Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router (CVSS 4.9)
- [CVE-2026-9211](https://cve.now/CVE-2026-9211.md): Certain NETGEAR routers allow unauthenticated users to gain control of the router (CVSS 5.2)
- [CVE-2026-0416](https://cve.now/CVE-2026-0416.md): Improper input validation in certain NETGEAR routers allows unauthorized modification of protected router functionality (CVSS 4.3)
- [CVE-2026-3088](https://cve.now/CVE-2026-3088.md): Unauthenticated users can disrupt router operation (CVSS 4.9)
- [CVE-2026-9213](https://cve.now/CVE-2026-9213.md): Insufficient input validation in certain NETGEAR routers (CVSS 6.9)
- [CVE-2026-0419](https://cve.now/CVE-2026-0419.md): Insufficient input validation vulnerability in NETGEAR JR6150 (CVSS 4.4)
- [CVE-2026-0412](https://cve.now/CVE-2026-0412.md): Insufficient input validation vulnerability in NETGEAR JR6150 Web UI (CVSS 4.3)
- [CVE-2026-0410](https://cve.now/CVE-2026-0410.md): Insufficient input validation in certain NETGEAR routers (CVSS 1.9)
- [CVE-2026-0409](https://cve.now/CVE-2026-0409.md): Netgear Orbi 370 Series Remote Code Execution vulnerability (CVSS 4.8)
- [CVE-2026-24714](https://cve.now/CVE-2026-24714.md): Some end of service NETGEAR products provide "TelnetEnable" functionality, which allows a magic packet to activate telnet service on the box (CVSS 7.5)
- [CVE-2026-0404](https://cve.now/CVE-2026-0404.md): Insufficient input validation in NETGEAR Orbi routers (CVSS 4.8)
- [CVE-2026-0408](https://cve.now/CVE-2026-0408.md): Path traversal vulnerability in Netgear WiFi Range Extenders (CVSS 6.1)
- [CVE-2026-0407](https://cve.now/CVE-2026-0407.md): Authentication bypass in NETGEAR WiFi Range Extenders via network adjacent attacks (CVSS 6.1)
- [CVE-2026-0406](https://cve.now/CVE-2026-0406.md): Insufficient input validation in NETGEAR Nighthawk router XR1000v2 (CVSS 6.1)
- [CVE-2026-0405](https://cve.now/CVE-2026-0405.md): Authentication Bypass in NETGEAR Orbi Devices (CVSS 6.1)
- [CVE-2026-0403](https://cve.now/CVE-2026-0403.md): Insufficient input validation in NETGEAR Orbi routers (CVSS 1.1)
- [CVE-2025-12946](https://cve.now/CVE-2025-12946.md): Improper input validation in NETGEAR Nighthawk routers (CVSS 4.4)
- [CVE-2025-12945](https://cve.now/CVE-2025-12945.md): Improper input validation in NETGEAR Nighthawk router R7000P (CVSS 1.1)
- [CVE-2025-12941](https://cve.now/CVE-2025-12941.md): Denial of Service Vulnerability in NETGEAR C6220 and C6230 (CVSS 5.0)
- [CVE-2025-12944](https://cve.now/CVE-2025-12944.md): Improper input validation in NETGEAR DGN2200v4 (CVSS 6.8)
- [CVE-2025-12943](https://cve.now/CVE-2025-12943.md): Improper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE300 (CVSS 5.2)
- [CVE-2025-12942](https://cve.now/CVE-2025-12942.md): Improper input validation in NETGEAR R6260 and R6850 (CVSS 4.8)
- [CVE-2025-12940](https://cve.now/CVE-2025-12940.md): Credentials recorded in logs in NETGEAR WAX610 and WAX610Y (CVSS 0.5)
- [CVE-2013-10063](https://cve.now/CVE-2013-10063.md): Netgear SPH200D \<= 1.0.4.80 Path Traversal via HTTP GET (CVSS 6.9)
- [CVE-2013-10060](https://cve.now/CVE-2013-10060.md): Netgear Routers pppoe.cgi RCE (CVSS 9.4)
- [CVE-2013-10061](https://cve.now/CVE-2013-10061.md): Netgear Routers setup.cgi RCE (CVSS 8.6)
- [CVE-2025-7407](https://cve.now/CVE-2025-7407.md): Netgear D6400 diag.cgi os command injection (CVSS 5.3)
- [CVE-2025-6565](https://cve.now/CVE-2025-6565.md): Netgear WNCE3001 HTTP POST Request http\_d stack-based overflow (CVSS 8.7)
- [CVE-2025-6511](https://cve.now/CVE-2025-6511.md): Netgear EX6150 sub\_410090 stack-based overflow (CVSS 8.7)
- [CVE-2025-6510](https://cve.now/CVE-2025-6510.md): Netgear EX6100 sub\_415EF8 stack-based overflow (CVSS 8.7)
- [CVE-2025-5934](https://cve.now/CVE-2025-5934.md): Netgear EX3700 mtd sub\_41619C stack-based overflow (CVSS 8.7)
- [CVE-2025-5495](https://cve.now/CVE-2025-5495.md): Netgear WNR614 URL improper authentication (CVSS 6.9)
- [CVE-2025-4980](https://cve.now/CVE-2025-4980.md): Netgear DGND3700 mini\_http currentsetting.htm information disclosure (CVSS 6.9)
- [CVE-2025-4978](https://cve.now/CVE-2025-4978.md): Netgear DGND3700 Basic Authentication BRS\_top.html improper authentication (CVSS 9.3)
- [CVE-2025-4977](https://cve.now/CVE-2025-4977.md): Netgear DGND3700 BRS\_top.html information disclosure (CVSS 6.9)
- [CVE-2025-4150](https://cve.now/CVE-2025-4150.md): Netgear EX6200 sub\_54340 buffer overflow (CVSS 8.7)
- [CVE-2025-4149](https://cve.now/CVE-2025-4149.md): Netgear EX6200 sub\_54014 buffer overflow (CVSS 8.7)
- [CVE-2025-4148](https://cve.now/CVE-2025-4148.md): Netgear EX6200 sub\_503FC buffer overflow (CVSS 8.7)
- [CVE-2025-4147](https://cve.now/CVE-2025-4147.md): Netgear EX6200 sub\_47F7C buffer overflow (CVSS 8.7)
- [CVE-2025-4146](https://cve.now/CVE-2025-4146.md): Netgear EX6200 sub\_41940 buffer overflow (CVSS 8.7)
- [CVE-2025-4145](https://cve.now/CVE-2025-4145.md): Netgear EX6200 sub\_3D0BC buffer overflow (CVSS 8.7)
- [CVE-2025-4142](https://cve.now/CVE-2025-4142.md): Netgear EX6200 sub\_3C8EC buffer overflow (CVSS 8.7)
- [CVE-2025-4141](https://cve.now/CVE-2025-4141.md): Netgear EX6200 sub\_3C03C buffer overflow (CVSS 8.7)
- [CVE-2025-4140](https://cve.now/CVE-2025-4140.md): Netgear EX6120 sub\_30394 buffer overflow (CVSS 8.7)
- [CVE-2025-4139](https://cve.now/CVE-2025-4139.md): Netgear EX6120 fwAcosCgiInbound buffer overflow (CVSS 8.7)
- [CVE-2025-4135](https://cve.now/CVE-2025-4135.md): Netgear WG302v2 ui\_get\_input\_value command injection (CVSS 5.3)
- [CVE-2025-4122](https://cve.now/CVE-2025-4122.md): Netgear JWNR2000v2 sub\_435E04 command injection (CVSS 5.3)
- [CVE-2025-4121](https://cve.now/CVE-2025-4121.md): Netgear JWNR2000v2 cmd\_wireless command injection (CVSS 5.3)
- [CVE-2025-4120](https://cve.now/CVE-2025-4120.md): Netgear JWNR2000v2 sub\_4238E8 buffer overflow (CVSS 8.7)
- [CVE-2025-4117](https://cve.now/CVE-2025-4117.md): Netgear JWNR2000v2 sub\_41A914 buffer overflow (CVSS 5.1)
- [CVE-2025-4116](https://cve.now/CVE-2025-4116.md): Netgear JWNR2000v2 get\_cur\_lang\_ver buffer overflow (CVSS 8.7)
- [CVE-2025-4115](https://cve.now/CVE-2025-4115.md): Netgear JWNR2000v2 default\_version\_is\_new buffer overflow (CVSS 8.7)
- [CVE-2025-4114](https://cve.now/CVE-2025-4114.md): Netgear JWNR2000v2 check\_language\_file buffer overflow (CVSS 8.7)
- [CVE-2025-25246](https://cve.now/CVE-2025-25246.md): NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users. (CVSS 8.1)
- [CVE-2024-23690](https://cve.now/CVE-2024-23690.md): EOL Netgear FVS336Gv2 and FVS336Gv3 Telnet Configuration Backup Command Injection (CVSS 7.2)
- [CVE-2024-12847](https://cve.now/CVE-2024-12847.md): NETGEAR DGN setup.cgi OS Command Injection (CVSS 9.8)
- [CVE-2024-12988](https://cve.now/CVE-2024-12988.md): Netgear R6900P/R7000P HTTP Header sub\_16C4C buffer overflow (CVSS 6.9)
- [CVE-2024-12147](https://cve.now/CVE-2024-12147.md): Netgear R6900 HTTP Header upgrade\_check.cgi buffer overflow (CVSS 7.1)
- [CVE-2023-51635](https://cve.now/CVE-2023-51635.md): NETGEAR RAX30 fing\_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-51634](https://cve.now/CVE-2023-51634.md): NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability (CVSS 7.5)
- [CVE-2024-6814](https://cve.now/CVE-2024-6814.md): NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2024-6813](https://cve.now/CVE-2024-6813.md): NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2024-7153](https://cve.now/CVE-2024-7153.md): Netgear WN604 siteSurvey.php direct request (CVSS 6.9)
- [CVE-2024-6646](https://cve.now/CVE-2024-6646.md): Netgear WN604 Web Interface downloadFile.php information disclosure (CVSS 6.9)
- [CVE-2024-5505](https://cve.now/CVE-2024-5505.md): NETGEAR ProSAFE Network Management System UpLoadServlet Directory Traversal Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2024-5247](https://cve.now/CVE-2024-5247.md): NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2024-5246](https://cve.now/CVE-2024-5246.md): NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2024-5245](https://cve.now/CVE-2024-5245.md): NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2022-43654](https://cve.now/CVE-2022-43654.md): NETGEAR CAX30S SSO Command Injection Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2021-34983](https://cve.now/CVE-2021-34983.md): NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability (CVSS 6.5)
- [CVE-2021-34982](https://cve.now/CVE-2021-34982.md): NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2021-34947](https://cve.now/CVE-2021-34947.md): NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-50231](https://cve.now/CVE-2023-50231.md): NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability (CVSS 8.0)
- [CVE-2023-44450](https://cve.now/CVE-2023-44450.md): NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-44449](https://cve.now/CVE-2023-44449.md): NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability (CVSS 8.8)
- [CVE-2023-44445](https://cve.now/CVE-2023-44445.md): NETGEAR CAX30 SSO Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-41183](https://cve.now/CVE-2023-41183.md): NETGEAR Orbi 760 SOAP API Authentication Bypass Vulnerability (CVSS 8.8)
- [CVE-2023-41182](https://cve.now/CVE-2023-41182.md): NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability (CVSS 7.2)
- [CVE-2023-40480](https://cve.now/CVE-2023-40480.md): NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-40479](https://cve.now/CVE-2023-40479.md): NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-40478](https://cve.now/CVE-2023-40478.md): NETGEAR RAX30 Telnet CLI passwd Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.0)
- [CVE-2023-38102](https://cve.now/CVE-2023-38102.md): NETGEAR ProSAFE Network Management System createUser Missing Authorization Privilege Escalation Vulnerability (CVSS 8.8)
- [CVE-2023-38101](https://cve.now/CVE-2023-38101.md): NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution Vulnerability (CVSS 7.2)
- [CVE-2023-38100](https://cve.now/CVE-2023-38100.md): NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability (CVSS 8.8)
- [CVE-2023-38099](https://cve.now/CVE-2023-38099.md): NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-38098](https://cve.now/CVE-2023-38098.md): NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-38097](https://cve.now/CVE-2023-38097.md): NETGEAR ProSAFE Network Management System BkreProcessThread Exposed Dangerous Function Remote Code Execution Vulnerability (CVSS 7.2)
- [CVE-2023-38096](https://cve.now/CVE-2023-38096.md): NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability (CVSS 9.8)
- [CVE-2023-38095](https://cve.now/CVE-2023-38095.md): NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-35722](https://cve.now/CVE-2023-35722.md): NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-35721](https://cve.now/CVE-2023-35721.md): NETGEAR Multiple Routers curl\_post Improper Certificate Validation Remote Code Execution Vulnerability (CVSS 8.1)
- [CVE-2023-34285](https://cve.now/CVE-2023-34285.md): NETGEAR RAX30 cmsCli\_authenticate Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-34284](https://cve.now/CVE-2023-34284.md): NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability (CVSS 6.3)
- [CVE-2023-34283](https://cve.now/CVE-2023-34283.md): NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability (CVSS 4.6)
- [CVE-2023-27370](https://cve.now/CVE-2023-27370.md): NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability (CVSS 5.7)
- [CVE-2023-27369](https://cve.now/CVE-2023-27369.md): NETGEAR RAX30 soap\_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability (CVSS 8.8)
- [CVE-2023-27368](https://cve.now/CVE-2023-27368.md): NETGEAR RAX30 soap\_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability (CVSS 8.8)
- [CVE-2023-27367](https://cve.now/CVE-2023-27367.md): NETGEAR RAX30 libcms\_cli Command Injection Remote Code Execution Vulnerability (CVSS 8.0)
- [CVE-2023-27361](https://cve.now/CVE-2023-27361.md): NETGEAR RAX30 rex\_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 6.8)
- [CVE-2023-27360](https://cve.now/CVE-2023-27360.md): NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability (CVSS 7.5)
- [CVE-2023-27358](https://cve.now/CVE-2023-27358.md): NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-27357](https://cve.now/CVE-2023-27357.md): NETGEAR RAX30 GetInfo Missing Authentication Information Disclosure Vulnerability (CVSS 6.5)
- [CVE-2023-27356](https://cve.now/CVE-2023-27356.md): NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability (CVSS 6.8)
- [CVE-2024-4235](https://cve.now/CVE-2024-4235.md): Netgear DG834Gv5 Web Management Interface cleartext storage (CVSS 2.7)
- [CVE-2023-48725](https://cve.now/CVE-2023-48725.md): A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7 (CVSS 7.2)
- [CVE-2024-1431](https://cve.now/CVE-2024-1431.md): Netgear R7000 Web Management Interface debuginfo.htm information disclosure (CVSS 4.3)
- [CVE-2024-1430](https://cve.now/CVE-2024-1430.md): Netgear R7000 Web Management Interface currentsetting.htm information disclosure (CVSS 5.3)
- [CVE-2023-49694](https://cve.now/CVE-2023-49694.md): NETGEAR ProSAFE Network Management System Privilege Escalation Via MySQL Server (CVSS 7.8)
- [CVE-2023-49693](https://cve.now/CVE-2023-49693.md): NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire Protocol (CVSS 9.8)
- [CVE-2023-2396](https://cve.now/CVE-2023-2396.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 4.3)
- [CVE-2023-2395](https://cve.now/CVE-2023-2395.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 4.3)
- [CVE-2023-2394](https://cve.now/CVE-2023-2394.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4)
- [CVE-2023-2393](https://cve.now/CVE-2023-2393.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4)
- [CVE-2023-2392](https://cve.now/CVE-2023-2392.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4)
- [CVE-2023-2391](https://cve.now/CVE-2023-2391.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4)
- [CVE-2023-2390](https://cve.now/CVE-2023-2390.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4)
- [CVE-2023-2389](https://cve.now/CVE-2023-2389.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4)
- [CVE-2023-2388](https://cve.now/CVE-2023-2388.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4)
- [CVE-2023-2387](https://cve.now/CVE-2023-2387.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4)
- [CVE-2023-2386](https://cve.now/CVE-2023-2386.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4)
- [CVE-2023-2385](https://cve.now/CVE-2023-2385.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4)
- [CVE-2023-2384](https://cve.now/CVE-2023-2384.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4)
- [CVE-2023-2383](https://cve.now/CVE-2023-2383.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4)
- [CVE-2023-2382](https://cve.now/CVE-2023-2382.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4)
- [CVE-2023-2381](https://cve.now/CVE-2023-2381.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4)
- [CVE-2023-2380](https://cve.now/CVE-2023-2380.md): Netgear SRX5308 denial of service (CVSS 6.5)
- [CVE-2022-27647](https://cve.now/CVE-2022-27647.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120\_10.0.9 (CVSS 8.0)
- [CVE-2022-27646](https://cve.now/CVE-2022-27646.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120\_10.0.9 (CVSS 8.0)
- [CVE-2022-27645](https://cve.now/CVE-2022-27645.md): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. (CVSS 8.8)
- [CVE-2022-27644](https://cve.now/CVE-2022-27644.md): This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETG (CVSS 5.0)
- [CVE-2022-27643](https://cve.now/CVE-2022-27643.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120\_10.0.9 (CVSS 8.8)
- [CVE-2022-27642](https://cve.now/CVE-2022-27642.md): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120\_10.0.91 (CVSS 6.3)
- [CVE-2022-27641](https://cve.now/CVE-2022-27641.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120\_10.0.9 (CVSS 8.8)
- [CVE-2022-38452](https://cve.now/CVE-2022-38452.md): A command execution vulnerability exists in the hidden telnet service functionality of Netgear Orbi Router RBR750 4.6.8.5. (CVSS 7.2)
- [CVE-2022-37337](https://cve.now/CVE-2022-37337.md): A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5. (CVSS 9.1)
- [CVE-2022-36429](https://cve.now/CVE-2022-36429.md): A command execution vulnerability exists in the ubus backend communications functionality of Netgear Orbi Satellite RBS750 4.6.8.5. (CVSS 7.2)
- [CVE-2022-38458](https://cve.now/CVE-2022-38458.md): A cleartext transmission vulnerability exists in the Remote Management functionality of Netgear Orbi Router RBR750 4.6.8.5. (CVSS 6.5)
- [CVE-2023-0850](https://cve.now/CVE-2023-0850.md): Netgear WNDR3700v2 Web Interface denial of service (CVSS 2.7)
- [CVE-2023-0849](https://cve.now/CVE-2023-0849.md): Netgear WNDR3700v2 Web Interface command injection (CVSS 4.7)
- [CVE-2023-0848](https://cve.now/CVE-2023-0848.md): Netgear WNDR3700v2 Web Management Interface denial of service (CVSS 5.3)
- [CVE-2023-24498](https://cve.now/CVE-2023-24498.md): Netgear ProSAFE 24 Port 10/100 FS726TP - CWE-522: Insufficiently Protected Credentials. (CVSS 7.5)
- [CVE-2021-34870](https://cve.now/CVE-2021-34870.md): This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR XR1000 1.0.0.52\_ (CVSS 6.5)
- [CVE-2021-34865](https://cve.now/CVE-2021-34865.md): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR routers. (CVSS 8.8)
- [CVE-2021-34980](https://cve.now/CVE-2021-34980.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78\_1.0.1 rou (CVSS 8.8)
- [CVE-2021-34979](https://cve.now/CVE-2021-34979.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78\_1.0.1 rou (CVSS 8.8)
- [CVE-2021-34978](https://cve.now/CVE-2021-34978.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78\_1.0.1 rou (CVSS 8.8)
- [CVE-2021-34977](https://cve.now/CVE-2021-34977.md): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.116\_10.2.100 (CVSS 8.8)
- [CVE-2021-34991](https://cve.now/CVE-2021-34991.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106\_10.0.8 (CVSS 8.8)
- [CVE-2021-27253](https://cve.now/CVE-2021-27253.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. (CVSS 8.8)
- [CVE-2021-27252](https://cve.now/CVE-2021-27252.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1 (CVSS 8.8)
- [CVE-2021-27251](https://cve.now/CVE-2021-27251.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. (CVSS 8.8)
- [CVE-2021-27239](https://cve.now/CVE-2021-27239.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware (CVSS 8.8)
- [CVE-2021-27276](https://cve.now/CVE-2021-27276.md): This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System (CVSS 7.1)
- [CVE-2021-27275](https://cve.now/CVE-2021-27275.md): This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR (CVSS 8.3)
- [CVE-2021-27274](https://cve.now/CVE-2021-27274.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System (CVSS 9.8)
- [CVE-2021-27273](https://cve.now/CVE-2021-27273.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System (CVSS 8.8)
- [CVE-2021-27272](https://cve.now/CVE-2021-27272.md): This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System (CVSS 7.1)
- [CVE-2021-27257](https://cve.now/CVE-2021-27257.md): This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETG (CVSS 6.5)
- [CVE-2021-27256](https://cve.now/CVE-2021-27256.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1 (CVSS 8.8)
- [CVE-2021-27255](https://cve.now/CVE-2021-27255.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. (CVSS 6.3)
- [CVE-2021-27254](https://cve.now/CVE-2021-27254.md): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800. (CVSS 6.3)
- [CVE-2020-27867](https://cve.now/CVE-2020-27867.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R62 (CVSS 6.8)
- [CVE-2020-27866](https://cve.now/CVE-2020-27866.md): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R6120, R622 (CVSS 8.8)
- [CVE-2020-27861](https://cve.now/CVE-2020-27861.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. (CVSS 8.8)
- [CVE-2020-27873](https://cve.now/CVE-2020-27873.md): This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.62\_1 (CVSS 6.5)
- [CVE-2020-27872](https://cve.now/CVE-2020-27872.md): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.62\_1.0.1 rout (CVSS 8.8)
- [CVE-2020-17409](https://cve.now/CVE-2020-17409.md): This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6 (CVSS 6.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/netgear
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.