NETGEAR vulnerabilities
219 CVEs and advisories name NETGEAR as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-0413Buffer overflow vulnerability in certain NETGEAR Nighthawk routers
- CVE-2026-0418Certain NETGEAR devices allow administrators to tamper with system
- CVE-2026-0417Insufficient input validation in certain NETGEAR routers
- CVE-2026-9210Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router
- CVE-2026-9211Certain NETGEAR routers allow unauthenticated users to gain control of the router
- CVE-2026-0416Improper input validation in certain NETGEAR routers allows unauthorized modification of protected router functionality
- CVE-2026-3088Unauthenticated users can disrupt router operation
- CVE-2026-9213Insufficient input validation in certain NETGEAR routers
- CVE-2026-0419Insufficient input validation vulnerability in NETGEAR JR6150
- CVE-2026-0412Insufficient input validation vulnerability in NETGEAR JR6150 Web UI
- CVE-2026-0410Insufficient input validation in certain NETGEAR routers
- CVE-2026-0409Netgear Orbi 370 Series Remote Code Execution vulnerability
- CVE-2026-24714Some end of service NETGEAR products provide "TelnetEnable" functionality, which allows a magic packet to activate telnet service on the box
- CVE-2026-0404Insufficient input validation in NETGEAR Orbi routers
- CVE-2026-0408Path traversal vulnerability in Netgear WiFi Range Extenders
- CVE-2026-0407Authentication bypass in NETGEAR WiFi Range Extenders via network adjacent attacks
- CVE-2026-0406Insufficient input validation in NETGEAR Nighthawk router XR1000v2
- CVE-2026-0405Authentication Bypass in NETGEAR Orbi Devices
- CVE-2026-0403Insufficient input validation in NETGEAR Orbi routers
- CVE-2025-12946Improper input validation in NETGEAR Nighthawk routers
- CVE-2025-12945Improper input validation in NETGEAR Nighthawk router R7000P
- CVE-2025-12941Denial of Service Vulnerability in NETGEAR C6220 and C6230
- CVE-2025-12944Improper input validation in NETGEAR DGN2200v4
- CVE-2025-12943Improper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE300
- CVE-2025-12942Improper input validation in NETGEAR R6260 and R6850
- CVE-2025-12940Credentials recorded in logs in NETGEAR WAX610 and WAX610Y
- CVE-2013-10063Netgear SPH200D <= 1.0.4.80 Path Traversal via HTTP GET
- CVE-2013-10060Netgear Routers pppoe.cgi RCE
- CVE-2013-10061Netgear Routers setup.cgi RCE
- CVE-2025-7407Netgear D6400 diag.cgi os command injection