Vulnerabilities

TI-2026-08095 CVE-2026-9210 · GHSA-rgvr-gjhw-96v7

Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router

LOW 22

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

CVSS 4.0MEDIUM 4.9 Adjacent network No auth No interaction EPSS 0.00216 Published 2026-06-09 Fixed in V1.0.0.100, V1.0.0.72 +13 CWE-20

TI-2025-05360 CVE-2025-5934 · GHSA-942c-3x7c-8jqx

Netgear EX3700 mtd sub_41619C stack-based overflow

HIGH 73

A vulnerability was found in Netgear EX3700 up to 1.0.0.88.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01119 Published 2025-06-10 No fix listed CWE-119

TI-2024-23454 CVE-2024-35519 · GHSA-6vmj-9xjc-fxmr

Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are…

MEDIUM 41

Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in operating_mode.cgi via the ap_mode parameter.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.01044 Published 2024-10-14 No fix listed CWE-78

TI-2024-23456 CVE-2024-35522 · GHSA-r58v-99w5-7j3x

Netgear EX3700 ' AC750 WiFi Range Extender Essentials Edition before 1.0.0.98 contains an…

MEDIUM 42

Netgear EX3700 ' AC750 WiFi Range Extender Essentials Edition before 1.0.0.98 contains an authenticated command injection in operating_mode.cgi via the ap_mode parameter with ap_24g_manual set to 1 and ap_24g_manual_sec…

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.0187 Published 2024-10-11 No fix listed CWE-77

TI-2021-13973 CVE-2021-34983 · GHSA-2r4f-jfx8-mhm3

Missing authentication in NETGEAR Multiple Routers

LOW 29

NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability.

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00329 Published 2024-05-07 No fix listed CWE-306

TI-2021-13972 CVE-2021-34982 · GHSA-3g79-p8hq-4qgp

Stack-based buffer overflow in NETGEAR Multiple Routers

MEDIUM 41

NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00581 Published 2024-05-07 No fix listed CWE-121

TI-2022-10624 CVE-2022-27643 · GHSA-h8wj-xxvx-cv2r

Buffer overflow in NETGEAR R6700v3

MEDIUM 61

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.25439 Published 2023-03-29 No fix listed CWE-120

TI-2021-20599 CVE-2021-45512 · GHSA-59h7-2c4x-36qm

Certain NETGEAR devices are affected by weak cryptography.

MEDIUM 43

Certain NETGEAR devices are affected by weak cryptography.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00567 Published 2021-12-26 No fix listed CWE-327

TI-2021-20620 CVE-2021-45533 · GHSA-36rp-gvh3-pg5v

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 37

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00631 Published 2021-12-26 No fix listed CWE-77

TI-2021-20708 CVE-2021-45621 · GHSA-2v34-645j-235m

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02037 Published 2021-12-26 No fix listed CWE-77

TI-2021-20726 CVE-2021-45639 · GHSA-fgjf-8pq6-h3gr

Certain NETGEAR devices are affected by reflected XSS.

LOW 28

Certain NETGEAR devices are affected by reflected XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00624 Published 2021-12-26 No fix listed CWE-79

TI-2021-20727 CVE-2021-45640 · GHSA-6rr5-9j7h-58cj

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 33

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0065 Published 2021-12-26 No fix listed

TI-2021-20728 CVE-2021-45641 · GHSA-9j28-327w-4vrh

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 39

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00718 Published 2021-12-26 No fix listed

TI-2021-20752 CVE-2021-45665 · GHSA-jqm7-xc8j-gcr6