NETGEAR

Exploited now

CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.

• 8.1HighJan 17, 2017NETGEAR Multiple Devices Information disclosureCVE-2017-5521Multiple NETGEAR devices are prone to admin password disclosure via simple crafted requests to the web management server.Added to KEV Sep 8, 2022 · 2,060 days after publicationExploited89% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
• 9.8CriticalMay 26, 2017NETGEAR Multiple Devices Memory corruptionCVE-2017-6862Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution.Added to KEV Jun 8, 2022 · 1,838 days after publicationExploited46% likelyDetection
• 9.8CriticalJan 30, 2017NETGEAR WNR2000v5 Router Memory corruptionCVE-2016-10174The NETGEAR WNR2000v5 router contains a buffer overflow which can be exploited to achieve remote code execution.Added to KEV Mar 25, 2022 · 1,880 days after publicationExploited83% likelyExploit codeExploit-DB · Metasploit
• 9.8CriticalApr 21, 2017NETGEAR Wireless Access Point (WAP) Devices Code / command injectionCVE-2016-1555Multiple NETGEAR Wireless Access Point devices allows unauthenticated web pages to pass form input directly to the command-line interface. Exploitation allows for arbitrary code execution.Added to KEV Mar 25, 2022 · 1,798 days after publicationExploited98% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
• 8.8HighMar 6, 2017NETGEAR DGN2200 Devices Code / command injectionCVE-2017-6334dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commandsAdded to KEV Mar 25, 2022 · 1,845 days after publicationExploited73% likelyExploit codeExploit-DB · MetasploitDetection
• 8.8HighDec 14, 2016NETGEAR Multiple Routers CSRFCVE-2016-6277NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.Added to KEV Mar 7, 2022 · 1,908 days after publicationExploited100% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
• 9.8CriticalFeb 22, 2017NETGEAR Wireless Router DGN2200 Code / command injectionCVE-2017-6077NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.Added to KEV Mar 7, 2022 · 1,838 days after publicationExploited69% likelyExploit codeExploit-DBDetection
• 9.8CriticalOct 9, 2020NETGEAR JGS516PE Devices Auth bypass / access controlCVE-2020-26919Netgear JGS516PE devices contain a missing function level access control vulnerability.Added to KEV Nov 3, 2021 · 390 days after publicationExploited57% likelyExploit codeNucleiDetection

Recent

• 4.5MediumOct 13, 2026NETGEAR CBR40CVE-2026-9218Insufficient input validation vulnerability in time server (NTP) setting of the listed NETGEAR models allows an attacker who is connected to the router’s local network and has the router’s administrator credentials to run unauthorized commands on the router. This vulnerability could impact the integrity of the affected router. There is no impact on confidentiality or availability of the affected router.
• 8.8HighOct 13, 2026NETGEAR CAX30CVE-2026-11732An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized commands on the router. This vulnerability could affect the confidentiality, integrity, and availability of the affected router. It applies only when the Block Sites feature is turned on.
• 8.8HighOct 13, 2026NETGEAR RAX30 Auth bypass / access controlCVE-2026-11731An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the confidentiality and integrity of management data and the availability of device-management functions.
• 5.4MediumOct 13, 2026NETGEAR EX3700CVE-2026-11730Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal.
• 4.5MediumOct 13, 2026NETGEAR R7300DSTCVE-2026-107918Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.
• 4.5MediumOct 13, 2026NETGEAR R7300DSTCVE-2026-107917Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.
• 3.5LowSep 8, 2026Netgear rax30 firmware Memory corruptionCVE-2026-9216An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.
• 6.7MediumSep 8, 2026Netgear xr1000 firmware CSRFCVE-2026-9215A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.
• 4.5MediumAug 11, 2026Netgear r7000 firmwareCVE-2026-9214Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
• 6.8MediumAug 11, 2026Netgear be9300 firmware Crypto / certificateCVE-2026-11814A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.
• 6.4MediumAug 11, 2026Netgear ms90 firmware Code / command injectionCVE-2026-11739A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.
• 4.4MediumAug 11, 2026Netgear be9300 firmwareCVE-2026-11738Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
• 4.5MediumAug 11, 2026Netgear rax20 firmwareCVE-2026-11737Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality.
• 4.9MediumAug 11, 2026Netgear rax20 firmware Memory corruptionCVE-2026-11736A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality.
• 4.9MediumAug 11, 2026Netgear r7000 firmware Memory corruptionCVE-2026-11735A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.
• 2.7LowAug 11, 2026Netgear mr70 firmware Memory corruptionCVE-2026-11734A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.
• 4.9MediumAug 11, 2026Netgear rax41 firmware Memory corruptionCVE-2026-11733A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.
• 8.1HighJun 9, 2026Netgear mr70 firmwareCVE-2026-9213A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamper with traffic between the router and the Internet, to execute code on the device.
• 8.0HighJun 9, 2026Netgear lbr1020 firmwareCVE-2026-9212Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.
• 8.8HighJun 9, 2026Netgear cax30 firmwareCVE-2026-9211An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation.
• 4.5MediumJun 9, 2026Netgear ex3700 firmwareCVE-2026-9210Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
• 6.5MediumJun 9, 2026Netgear rbe970 firmware Memory corruptionCVE-2026-3088Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.
• 5.9MediumJun 9, 2026Netgear rax120 firmware Crypto / certificateCVE-2026-0420An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting the product's confidentiality. This vulnerability affects the listed NETGEAR models.
• 8.0HighJun 9, 2026Netgear jr6150 firmwareCVE-2026-0419Insufficient input validation in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows users connected to the local WiFi Networks to execute operating system commands. NETGEAR JR6150 has reached End-of-Support phase as of 2018 , and no further security updates are planned. NETGEAR strongly recommends replacing these devices with newer NETGEAR models to ensure continued security support and updates. This vulnerability has been identified through firmware emul
• 4.5MediumJun 9, 2026Netgear cbr750 firmwareCVE-2026-0418Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.
• 4.5MediumJun 9, 2026Netgear mr60 firmwareCVE-2026-0417Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity.
• 4.5MediumJun 9, 2026Netgear raxe450 firmwareCVE-2026-0416An insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated administrator with local network access to submit crafted input that bypasses intended management interface restrictions, resulting in unauthorized modification of protected router software or functionality.
• 4.5MediumJun 9, 2026Netgear rbe970 firmwareCVE-2026-0415Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
• 4.5MediumJun 9, 2026Netgear rbe970 firmware Code / command injectionCVE-2026-0414Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
• 4.5MediumJun 9, 2026Netgear rbe370 firmware Memory corruptionCVE-2026-0413A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
• 4.5MediumJun 9, 2026Netgear jr6150 firmwareCVE-2026-0412Insufficient input validation vulnerability in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows administrators connected to the local network to make unauthorized modification of router software and functionality. NETGEAR JR6150 reached End-of-Support status in 2018 and is no longer receiving security updates. NETGEAR strongly recommends replacing these devices with newer NETGEAR models to ensure continued security support and updates. This vulnerability
• 8.0HighJun 9, 2026Netgear rbe970 firmware Information disclosureCVE-2026-0411An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to gain administrator access to the Orbi router. The listed NETGEAR models are affected by this vulnerability. Orbi WiFi Systems without satellite devices are not impacted by this issue.
• 4.5MediumJun 9, 2026Netgear r7000 firmwareCVE-2026-0410Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.
• 6.4MediumJun 9, 2026Netgear rbe370 firmware Memory corruptionCVE-2026-0409A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the router and the Internet to run commands on your device when the device administrator performs certain specific management actions. This issue affects NETGEAR Orbi 370 series devices before V12.1.2.7.
• 7.7HighJan 28, 2026Netgear rbr20 firmware Crypto / certificateCVE-2022-40620FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its auto-update mechanism. An attacker (suitably positioned on the network) could intercept the update request and deliver a malicious update package in order to gain arbitrary code execution on affected devices. This affects R6230 before 1.1.0.112, R6260 before 1.1.0.88, R7000 before 1.0.11.134, R8900 before 1.0.5.42, R9000 b
• 7.7HighJan 28, 2026Netgear rbr20 firmware Code / command injectionCVE-2022-40619FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices. This interface is vulnerable to unauthenticated arbitrary command injection through the funjsq_access_token parameter. This affects R6230 before 1.1.0.112, R6260 before 1.1.0.88, R7000 before 1.0.11.134, R8900 before 1.0.5.42, R9000 before 1.0.5.42, and XR300 before 1.0.3.72 and Orbi RBR20 before 2.7.2.26, RBR50 before 2.7.4.26, RBS20 before 2.2.5% likely
• 8.0HighJan 13, 2026Netgear ex2800 firmware Auth bypass / access controlCVE-2026-0408A path traversal vulnerability in NETGEAR WiFi range extenders allows an attacker with LAN authentication to access the router's IP and review the contents of the dynamically generated webproc file, which records the username and password submitted to the router GUI.
• 8.0HighJan 13, 2026Netgear ex5000 firmware Auth bypass / access controlCVE-2026-0407An insufficient authentication vulnerability in NETGEAR WiFi range extenders allows a network adjacent attacker with WiFi authentication or a physical Ethernet port connection to bypass the authentication process and access the admin panel.
• 8.0HighJan 13, 2026Netgear xr1000v2 firmware Code / command injectionCVE-2026-0406An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injections.
• 7.8HighJan 13, 2026Netgear cbr750 firmware Auth bypass / access controlCVE-2026-0405An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.
• 8.0HighJan 13, 2026Netgear rbr750 firmware Code / command injectionCVE-2026-0404An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows network adjacent attackers authenticated over WiFi or on LAN to execute OS command injections on the router. DHCPv6 is not enabled by default.1.1% likely
• 8.0HighJan 13, 2026Netgear rbe971 firmware Code / command injectionCVE-2026-0403An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.
• 9.8CriticalDec 23, 2025Netgear ex8000 firmware Code / command injectionCVE-2025-50526Netgear EX8000 V1.0.0.126 was discovered to contain a command injection vulnerability via the switch_status function.1.2% likely
• 6.5MediumDec 23, 2025Netgear ex8000 firmware Code / command injectionCVE-2025-45493Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the iface parameter in the action_bandwidth function.
• 7.5HighDec 9, 2025Netgear rs700 firmwareCVE-2025-12946A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques (MiTM) to manipulate DNS responses and execute commands when speedtests are run. This issue affects RS700: through 1.0.7.82; RAX54Sv2 : before V1.1.6.36; RAX41v2: before V1.1.6.36; RAX50: before V1.2.14.114; RAXE500: before V1.2.14.114; RAX41: before V1.0.17.142; RAX43: before V1.0.17.142; RA
• 2.4LowDec 9, 2025Netgear r7000p firmware Code / command injectionCVE-2025-12945An improper input validation vulnerability in the NETGEAR Nighthawk R7000P (end of service) routers lets an authenticated administrator with local network access to the device, to execute OS command injections and make unauthorized modifications to the router software and functionality impacting its integrity. There is no additional impact to confidentiality or availability. This issue affects R7000P: through 1.3.3.154.1.2% likely
• 5.7MediumDec 9, 2025Netgear c6230 firmware Auth bypass / access controlCVE-2025-12941Denial of Service Vulnerability in NETGEAR C6220 and C6230 (DOCSIS® 3.0 Two-in-one Cable Modem + WiFi Router) allows authenticated local WiFi users reboot the router.
• 8.8HighNov 11, 2025Netgear dgn2200 firmwareCVE-2025-12944Improper input validation in NETGEAR DGN2200v4 (N300 Wireless ADSL2+ Modem Router) allows attackers with direct network access to the device to potentially execute code on the device. Please check the firmware version and update to the latest. Fixed in:  DGN2200v4 firmware 1.0.0.132 or later
• 7.5HighNov 11, 2025Netgear rax30 firmware Crypto / certificateCVE-2025-12943Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band WiFi 6E Router) allows attackers with the ability to intercept and tamper traffic destined to the device to execute arbitrary commands on the device. Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update to the latest. Fixed in: RAX30 firmware 1.0.14.108 or
• 7.5HighNov 11, 2025Netgear r6260 firmwareCVE-2025-12942Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform command execution.This issue affects R6260: through 1.1.0.86; R6850: through 1.1.0.86.

See every NETGEAR entry on the dashboard.

Top products

• rbe970 firmware4 CVEs in the last year
• r7000 firmware3 CVEs in the last year
• rbr20 firmware2 CVEs in the last year
• rbe370 firmware2 CVEs in the last year
• rax30 firmware2 CVEs in the last year
• rax20 firmware2 CVEs in the last year
• R7300DST2 CVEs in the last year
• mr70 firmware2 CVEs in the last year
• jr6150 firmware2 CVEs in the last year
• ex8000 firmware2 CVEs in the last year, 1 critical