https://vulnogram.org/ Most recent CVEs assigned by NETGEAR (netgear). https://vulnogram.org/seaview/icons/netgear.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-107918 https://vulnogram.org/CVE-2026-107918 Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.This issue was identified through testing in… Medium Tue, 13 Oct 2026 14:50:33 GMT https://vulnogram.org/CVE-2026-107917 https://vulnogram.org/CVE-2026-107917 Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing… Medium Tue, 13 Oct 2026 14:46:32 GMT https://vulnogram.org/CVE-2026-11732 https://vulnogram.org/CVE-2026-11732 An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized commands on the r… High Tue, 13 Oct 2026 14:42:50 GMT https://vulnogram.org/CVE-2026-11731 https://vulnogram.org/CVE-2026-11731 An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings.… High Tue, 13 Oct 2026 14:41:42 GMT https://vulnogram.org/CVE-2026-11730 https://vulnogram.org/CVE-2026-11730 Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator ses… Medium Tue, 13 Oct 2026 14:38:16 GMT https://vulnogram.org/CVE-2026-9218 https://vulnogram.org/CVE-2026-9218 Insufficient input validation vulnerability in time server (NTP) setting of the listed NETGEAR models allows an attacker who is connected to the router’s local network and has the router’s administrator credentials to run unauthorized commands on the… Medium Tue, 13 Oct 2026 14:34:34 GMT https://vulnogram.org/CVE-2026-9216 https://vulnogram.org/CVE-2026-9216 An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity i… Low Tue, 08 Sep 2026 17:09:12 GMT https://vulnogram.org/CVE-2026-9215 https://vulnogram.org/CVE-2026-9215 A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active a… Medium Tue, 08 Sep 2026 17:06:47 GMT https://vulnogram.org/CVE-2026-9214 https://vulnogram.org/CVE-2026-9214 Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality. Medium Unsupported When Assigned Tue, 11 Aug 2026 15:06:21 GMT https://vulnogram.org/CVE-2026-11736 https://vulnogram.org/CVE-2026-11736 A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality. Low Tue, 11 Aug 2026 15:06:19 GMT https://vulnogram.org/CVE-2026-11735 https://vulnogram.org/CVE-2026-11735 A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality. Low Tue, 11 Aug 2026 15:06:17 GMT https://vulnogram.org/CVE-2026-11738 https://vulnogram.org/CVE-2026-11738 Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality. Medium Tue, 11 Aug 2026 15:06:16 GMT https://vulnogram.org/CVE-2026-11739 https://vulnogram.org/CVE-2026-11739 A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity… Medium Tue, 11 Aug 2026 15:06:14 GMT https://vulnogram.org/CVE-2026-11734 https://vulnogram.org/CVE-2026-11734 A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable. Low Tue, 11 Aug 2026 15:06:13 GMT https://vulnogram.org/CVE-2026-11733 https://vulnogram.org/CVE-2026-11733 A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device. Low Tue, 11 Aug 2026 15:06:11 GMT https://vulnogram.org/CVE-2026-11737 https://vulnogram.org/CVE-2026-11737 Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality. Medium Tue, 11 Aug 2026 15:06:10 GMT https://vulnogram.org/CVE-2026-11814 https://vulnogram.org/CVE-2026-11814 A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected… Medium Tue, 11 Aug 2026 15:06:08 GMT https://vulnogram.org/CVE-2026-62659 https://vulnogram.org/CVE-2026-62659 A security flaw was discovered in the NETGEAR WAX333 Access Point that could allow someone already logged in and connected to the local network to make unauthorized changes to the device's settings Medium Tue, 14 Jul 2026 17:48:45 GMT https://vulnogram.org/CVE-2026-15757 https://vulnogram.org/CVE-2026-15757 A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send unauthorized commands to the device. This issue was identified through testing in a controlled research environment using a simul… Medium Unsupported When Assigned Tue, 14 Jul 2026 17:46:15 GMT https://vulnogram.org/CVE-2026-62656 https://vulnogram.org/CVE-2026-62656 A security flaw was found in certain NETGEAR RAX models that could allow a logged-in user to send specially crafted requests to the router and run unauthorized commands. This could enable the user to make unauthorized changes to the router and affect… Medium Tue, 14 Jul 2026 17:46:15 GMT https://vulnogram.org/CVE-2026-62655 https://vulnogram.org/CVE-2026-62655 A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to stop responding or restart unexpectedly, disrupting network connectivity and making the device temporarily unavailable. Medium Tue, 14 Jul 2026 17:46:14 GMT https://vulnogram.org/CVE-2026-62657 https://vulnogram.org/CVE-2026-62657 A security flaw in the router's certificate validation process was discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take control of the device. Medium Tue, 14 Jul 2026 17:46:13 GMT https://vulnogram.org/CVE-2026-62658 https://vulnogram.org/CVE-2026-62658 A security flaw was discovered in certain NETGEAR Nighthawk RAX series routers that could allow someone already logged in to the device to run unauthorized commands or code on the router. Medium Tue, 14 Jul 2026 17:46:12 GMT https://vulnogram.org/CVE-2026-0420 https://vulnogram.org/CVE-2026-0420 An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting the product's confidentiality. This vulnera… Medium Network Exploitable Tue, 09 Jun 2026 15:50:53 GMT https://vulnogram.org/CVE-2026-9212 https://vulnogram.org/CVE-2026-9212 Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations. Medium Tue, 09 Jun 2026 15:50:53 GMT https://vulnogram.org/CVE-2026-0411 https://vulnogram.org/CVE-2026-0411 An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to gain administrator access to the Orbi router. The listed NETGEAR models are affected by this vulnerability. Or… Medium Tue, 09 Jun 2026 15:50:52 GMT https://vulnogram.org/CVE-2026-0415 https://vulnogram.org/CVE-2026-0415 Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality. Medium Tue, 09 Jun 2026 15:50:51 GMT https://vulnogram.org/CVE-2026-0414 https://vulnogram.org/CVE-2026-0414 Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality. Medium Tue, 09 Jun 2026 15:50:51 GMT https://vulnogram.org/CVE-2026-0413 https://vulnogram.org/CVE-2026-0413 A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality. Medium Tue, 09 Jun 2026 15:50:50 GMT https://vulnogram.org/CVE-2026-0418 https://vulnogram.org/CVE-2026-0418 Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system. Medium Tue, 09 Jun 2026 15:50:50 GMT https://vulnogram.org/CVE-2026-0417 https://vulnogram.org/CVE-2026-0417 Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity. Medium Tue, 09 Jun 2026 15:50:49 GMT https://vulnogram.org/CVE-2026-9210 https://vulnogram.org/CVE-2026-9210 Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality. Medium Tue, 09 Jun 2026 15:50:48 GMT https://vulnogram.org/CVE-2026-9211 https://vulnogram.org/CVE-2026-9211 An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation. Medium Tue, 09 Jun 2026 15:50:48 GMT https://vulnogram.org/CVE-2026-0416 https://vulnogram.org/CVE-2026-0416 An insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated administrator with local network access to submit crafted input that bypasses intended management interface restrictions, resulting in u… Medium Tue, 09 Jun 2026 15:50:47 GMT https://vulnogram.org/CVE-2026-3088 https://vulnogram.org/CVE-2026-3088 Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests. Medium Tue, 09 Jun 2026 15:50:47 GMT https://vulnogram.org/CVE-2026-9213 https://vulnogram.org/CVE-2026-9213 A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamper with traffic between the router and the Internet, to execute code on the device. Medium Network Exploitable Tue, 09 Jun 2026 15:50:46 GMT https://vulnogram.org/CVE-2026-0419 https://vulnogram.org/CVE-2026-0419 Insufficient input validation in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows users connected to the local WiFi Networks to execute operating system commands. NETGEAR JR6150 has reached End-of-Support phase as… Medium Unsupported When Assigned Tue, 09 Jun 2026 15:50:46 GMT https://vulnogram.org/CVE-2026-0412 https://vulnogram.org/CVE-2026-0412 Insufficient input validation vulnerability in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows administrators connected to the local network to make unauthorized modification of router software and functionality.… Medium Unsupported When Assigned Tue, 09 Jun 2026 15:50:45 GMT https://vulnogram.org/CVE-2026-0410 https://vulnogram.org/CVE-2026-0410 Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality. Low Tue, 09 Jun 2026 15:41:47 GMT https://vulnogram.org/CVE-2026-0409 https://vulnogram.org/CVE-2026-0409 A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the router and the Internet to run commands on your device when the device administrator performs certain specific management actions. Thi… Medium Network Exploitable Tue, 09 Jun 2026 15:39:09 GMT https://vulnogram.org/CVE-2026-0404 https://vulnogram.org/CVE-2026-0404 An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows network adjacent attackers authenticated over WiFi or on LAN to execute OS command injections on the router. DHCPv6 is not enabled by default. Medium Tue, 13 Jan 2026 16:01:14 GMT https://vulnogram.org/CVE-2026-0408 https://vulnogram.org/CVE-2026-0408 A path traversal vulnerability in NETGEAR WiFi range extenders allows an attacker with LAN authentication to access the router's IP and review the contents of the dynamically generated webproc file, which records the username and password submitted t… Medium Tue, 13 Jan 2026 16:01:11 GMT https://vulnogram.org/CVE-2026-0407 https://vulnogram.org/CVE-2026-0407 An insufficient authentication vulnerability in NETGEAR WiFi range extenders allows a network adjacent attacker with WiFi authentication or a physical Ethernet port connection to bypass the authentication process and access the admin panel. Medium Tue, 13 Jan 2026 16:01:04 GMT https://vulnogram.org/CVE-2026-0406 https://vulnogram.org/CVE-2026-0406 An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injections. Medium Tue, 13 Jan 2026 16:00:59 GMT https://vulnogram.org/CVE-2026-0405 https://vulnogram.org/CVE-2026-0405 An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin. Medium Tue, 13 Jan 2026 16:00:48 GMT https://vulnogram.org/CVE-2026-0403 https://vulnogram.org/CVE-2026-0403 An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections. Low Tue, 13 Jan 2026 16:00:25 GMT https://vulnogram.org/CVE-2025-12946 https://vulnogram.org/CVE-2025-12946 A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques (MiTM) to manipulate DNS responses and execute… Medium Tue, 09 Dec 2025 17:02:20 GMT https://vulnogram.org/CVE-2025-12945 https://vulnogram.org/CVE-2025-12945 An improper input validation vulnerability in the NETGEAR Nighthawk R7000P (end of service) routers lets an authenticated administrator with local network access to the device, to execute OS command injections and make unauthorized modifications to t… Low Unsupported When Assigned Tue, 09 Dec 2025 17:01:38 GMT https://vulnogram.org/CVE-2025-12941 https://vulnogram.org/CVE-2025-12941 Denial of Service Vulnerability in NETGEAR C6220 and C6230 (DOCSIS® 3.0 Two-in-one Cable Modem + WiFi Router) allows authenticated local WiFi users reboot the router. Medium Unsupported When Assigned Tue, 09 Dec 2025 17:01:04 GMT https://vulnogram.org/CVE-2025-12944 https://vulnogram.org/CVE-2025-12944 Improper input validation in NETGEAR DGN2200v4 (N300 Wireless ADSL2+ Modem Router) allows attackers with direct network access to the device to potentially execute code on the device. Please check the firmware version and update to the latest. Fixed… Medium Unsupported When Assigned Tue, 11 Nov 2025 16:17:51 GMT