Vulnerabilities

TI-2026-00280 CVE-2026-0418 · GHSA-5gqq-ch9p-4h64

Certain NETGEAR devices allow administrators to tamper with system

LOW 20

Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.

CVSS 4.0MEDIUM 4.3 Adjacent network High privileges No interaction EPSS 0.00245 Published 2026-06-09 Fixed in v4.6.14.4, V1.1.7.128 +8 CWE-15

TI-2026-08095 CVE-2026-9210 · GHSA-rgvr-gjhw-96v7

Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router

LOW 22

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

CVSS 4.0MEDIUM 4.9 Adjacent network No auth No interaction EPSS 0.00216 Published 2026-06-09 Fixed in V1.0.0.100, V1.0.0.72 +13 CWE-20

TI-2025-03677 CVE-2025-4140 · GHSA-mf3m-m2fx-pq76

Netgear EX6120 sub_30394 buffer overflow

MEDIUM 42

A vulnerability, which was classified as critical, has been found in Netgear EX6120 1.0.3.94.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01222 Published 2025-04-30 No fix listed CWE-119

TI-2025-03676 CVE-2025-4139 · GHSA-w56q-jx3j-44rq

Netgear EX6120 fwAcosCgiInbound buffer overflow

MEDIUM 42

A vulnerability classified as critical was found in Netgear EX6120 1.0.0.68.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01167 Published 2025-04-30 No fix listed CWE-119

TI-2024-23454 CVE-2024-35519 · GHSA-6vmj-9xjc-fxmr

Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are…

MEDIUM 41

Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in operating_mode.cgi via the ap_mode parameter.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.01044 Published 2024-10-14 No fix listed CWE-78

TI-2024-23453 CVE-2024-35518 · GHSA-mx7j-q788-jq8x

Netgear EX6120 v1.0.0.68 is vulnerable to Command Injection in genie_fix2.cgi via the wan_dns1_pri parameter.

MEDIUM 41

Netgear EX6120 v1.0.0.68 is vulnerable to Command Injection in genie_fix2.cgi via the wan_dns1_pri parameter.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.01048 Published 2024-10-14 No fix listed CWE-77

TI-2021-13973 CVE-2021-34983 · GHSA-2r4f-jfx8-mhm3

Missing authentication in NETGEAR Multiple Routers

LOW 29

NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability.

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00329 Published 2024-05-07 No fix listed CWE-306

TI-2021-13972 CVE-2021-34982 · GHSA-3g79-p8hq-4qgp

Stack-based buffer overflow in NETGEAR Multiple Routers

MEDIUM 41

NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00581 Published 2024-05-07 No fix listed CWE-121

TI-2022-10624 CVE-2022-27643 · GHSA-h8wj-xxvx-cv2r

Buffer overflow in NETGEAR R6700v3

MEDIUM 61

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.25439 Published 2023-03-29 No fix listed CWE-120

TI-2021-20599 CVE-2021-45512 · GHSA-59h7-2c4x-36qm

Certain NETGEAR devices are affected by weak cryptography.

MEDIUM 43

Certain NETGEAR devices are affected by weak cryptography.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00567 Published 2021-12-26 No fix listed CWE-327

TI-2021-20613 CVE-2021-45526 · GHSA-c8w9-7pxw-2m9j

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

LOW 38

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00465 Published 2021-12-26 No fix listed CWE-120

TI-2021-20620 CVE-2021-45533 · GHSA-36rp-gvh3-pg5v

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 37

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00631 Published 2021-12-26 No fix listed CWE-77

TI-2021-20708 CVE-2021-45621 · GHSA-2v34-645j-235m

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02037 Published 2021-12-26 No fix listed CWE-77

TI-2021-20726 CVE-2021-45639 · GHSA-fgjf-8pq6-h3gr

Certain NETGEAR devices are affected by reflected XSS.

LOW 28

Certain NETGEAR devices are affected by reflected XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00624 Published 2021-12-26 No fix listed CWE-79

TI-2021-20727 CVE-2021-45640 · GHSA-6rr5-9j7h-58cj

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 33

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0065 Published 2021-12-26 No fix listed

TI-2021-20728 CVE-2021-45641 · GHSA-9j28-327w-4vrh

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 39

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00718 Published 2021-12-26 No fix listed

TI-2021-20752 CVE-2021-45665 · GHSA-jqm7-xc8j-gcr6