Vulnerabilities

TI-2026-00280 CVE-2026-0418 · GHSA-5gqq-ch9p-4h64

Certain NETGEAR devices allow administrators to tamper with system

LOW 20

Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.

CVSS 4.0MEDIUM 4.3 Adjacent network High privileges No interaction EPSS 0.00245 Published 2026-06-09 Fixed in v4.6.14.4, V1.1.7.128 +8 CWE-15

TI-2026-00267 CVE-2026-0405 · GHSA-2cqm-696m-6jx3

Authentication Bypass in NETGEAR Orbi Devices

LOW 29

An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.

CVSS 4.0MEDIUM 6.1 Adjacent network Low privileges No interaction EPSS 0.00361 Published 2026-01-13 Fixed in v9.13.2.1, V4.6.14.8 +4 CWE-287

TI-2021-20589 CVE-2021-45502 · GHSA-rw4w-f599-mv6q

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 42

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.0058 Published 2021-12-26 No fix listed

TI-2021-20590 CVE-2021-45503 · GHSA-hhgr-7cc2-hwjp

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 42

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00475 Published 2021-12-26 No fix listed

TI-2021-20591 CVE-2021-45504 · GHSA-25g7-4hx6-524h

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 44

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01181 Published 2021-12-26 No fix listed

TI-2021-20592 CVE-2021-45505 · GHSA-3r3r-8fjq-x3wq

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 42

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00474 Published 2021-12-26 No fix listed

TI-2021-20593 CVE-2021-45506 · GHSA-3rwg-qf5g-xvjv

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 42

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00474 Published 2021-12-26 No fix listed

TI-2021-20594 CVE-2021-45507 · GHSA-qfrw-2r49-g452

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 45

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01525 Published 2021-12-26 No fix listed

TI-2021-20595 CVE-2021-45508 · GHSA-7g9c-3hjm-r38g

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 44

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01181 Published 2021-12-26 No fix listed

TI-2021-20683 CVE-2021-45596 · GHSA-v3vh-3r83-h3r3

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 41

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01531 Published 2021-12-26 No fix listed CWE-77

TI-2021-20684 CVE-2021-45597 · GHSA-x844-f6px-v43p

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 41

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01531 Published 2021-12-26 No fix listed CWE-77

TI-2021-20685 CVE-2021-45598 · GHSA-3x79-3x7f-qrvm

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 41

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01531 Published 2021-12-26 No fix listed CWE-77

TI-2021-20686 CVE-2021-45599 · GHSA-xphq-hxjq-7x4c

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 41

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01531 Published 2021-12-26 No fix listed CWE-77

TI-2021-20687 CVE-2021-45600 · GHSA-46rh-w7f2-6752

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 40

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.01512 Published 2021-12-26 No fix listed CWE-77

TI-2021-20688 CVE-2021-45601 · GHSA-3wvf-vrwq-272g

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 41

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01531 Published 2021-12-26 No fix listed CWE-77

TI-2021-20691 CVE-2021-45604 · GHSA-cxv8-ggg4-fhvm

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 21

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1MEDIUM 4.5 Adjacent network High privileges No interaction EPSS 0.00381 Published 2021-12-26 No fix listed CWE-787

TI-2021-20699 CVE-2021-45612 · GHSA-95h9-7v59-h6gr