netgear Vulnerability Advisory Catalog

Total 1,319 security vulnerabilities recorded for netgear software and firmware.

← Back to All Vendors
Component: mr70_firmware

A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamper with traffic between the router and t...

📅 2026-06-09
CVSS 8.1 Dossier →
Component: lbr1020_firmware

Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting...

📅 2026-06-09
CVSS 8.0 Dossier →
Component: cax30_firmware

An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation....

📅 2026-06-09
CVSS 8.8 Dossier →
CVE-2026-9210 MEDIUM
Component: ex3700_firmware

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make un...

📅 2026-06-09
CVSS 4.5 Dossier →
CVE-2026-3088 MEDIUM
Component: rbe970_firmware

Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests....

📅 2026-06-09
CVSS 6.5 Dossier →
CVE-2026-0420 MEDIUM
Component: rax120_firmware

An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perfo...

📅 2026-06-09
CVSS 5.9 Dossier →
Component: jr6150_firmware

Insufficient input validation in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows users connected to the local Wi...

📅 2026-06-09
CVSS 8.0 Dossier →
CVE-2026-0418 MEDIUM
Component: cbr750_firmware

Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the syst...

📅 2026-06-09
CVSS 4.5 Dossier →
CVE-2026-0417 MEDIUM
Component: mr60_firmware

Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper...

📅 2026-06-09
CVSS 4.5 Dossier →
CVE-2026-0416 MEDIUM
Component: raxe450_firmware

An insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated administrator with local network acc...

📅 2026-06-09
CVSS 4.5 Dossier →
CVE-2026-0415 MEDIUM
Component: rbe970_firmware

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make un...

📅 2026-06-09
CVSS 4.5 Dossier →
CVE-2026-0414 MEDIUM
Component: rbe970_firmware

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make un...

📅 2026-06-09
CVSS 4.5 Dossier →
CVE-2026-0413 MEDIUM
Component: rbe370_firmware

A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the...

📅 2026-06-09
CVSS 4.5 Dossier →
CVE-2026-0412 MEDIUM
Component: jr6150_firmware

Insufficient input validation vulnerability in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows administrators co...

📅 2026-06-09
CVSS 4.5 Dossier →
Component: rbe970_firmware

An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to gain admin...

📅 2026-06-09
CVSS 8.0 Dossier →
CVE-2026-0410 MEDIUM
Component: r7000_firmware

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software ...

📅 2026-06-09
CVSS 4.5 Dossier →
CVE-2026-0409 MEDIUM
Component: rbe370_firmware

A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the router and the Internet to run com...

📅 2026-06-09
CVSS 6.4 Dossier →
Component: rbr20_firmware

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading up...

📅 2026-01-28
CVSS 7.7 Dossier →
Component: rbr20_firmware

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devic...

📅 2026-01-28
CVSS 7.7 Dossier →
Component: ex2800_firmware

A path traversal vulnerability in NETGEAR WiFi range extenders allows an attacker with LAN authentication to access the router's IP and review the c...

📅 2026-01-13
CVSS 8.0 Dossier →
Component: ex5000_firmware

An insufficient authentication vulnerability in NETGEAR WiFi range extenders allows a network adjacent attacker with WiFi authentication or a physic...

📅 2026-01-13
CVSS 8.0 Dossier →
Component: xr1000v2_firmware

An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injectio...

📅 2026-01-13
CVSS 8.0 Dossier →
Component: cbr750_firmware

An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an ...

📅 2026-01-13
CVSS 7.8 Dossier →
Component: rbr750_firmware

An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows network adjacent attackers authenticated over Wi...

📅 2026-01-13
CVSS 8.0 Dossier →
Page 1 of 55 (1,319 Total Records)