Vulnerabilities

TI-2026-08097 CVE-2026-9212 · GHSA-wq28-w638-7xcv

Insufficient authentication and input validation in certain NETGEAR products

LOW 27

Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.

CVSS 4.0MEDIUM 5.6 Adjacent network Low privileges No interaction EPSS 0.0027 Published 2026-06-09 Fixed in V2.6.4.60, V2.7.6.8 +8 CWE-20

TI-2022-19265 CVE-2022-40620 · GHSA-8cgh-w254-67rw

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems…

LOW 35

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its auto-update mechanism.

CVSS 3.1HIGH 7.7 Network No auth No interaction EPSS 0.00315 Published 2026-01-28 No fix listed CWE-295

TI-2022-19264 CVE-2022-40619 · GHSA-5gwm-h32x-cppq

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems…

MEDIUM 40

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices.

CVSS 3.1HIGH 7.7 Network No auth No interaction EPSS 0.02526 Published 2026-01-28 No fix listed CWE-77

TI-2021-13937 CVE-2021-34947 · GHSA-jj28-565j-58r3

Out-of-bounds write in NETGEAR R7800

MEDIUM 41

NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00549 Published 2024-05-07 No fix listed CWE-787

TI-2023-09143 CVE-2023-23110 · GHSA-6fpf-rgcx-jmrx

An exploitable firmware modification vulnerability was discovered in certain Netgear…

HIGH 68

An exploitable firmware modification vulnerability was discovered in certain Netgear products.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00574 Published 2023-02-02 No fix listed CWE-494

TI-2021-20635 CVE-2021-45548 · GHSA-qq4v-p8xp-8526

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 40

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00953 Published 2021-12-26 No fix listed CWE-77

TI-2021-20639 CVE-2021-45552 · GHSA-x6f6-fmwf-4mpg

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 34

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01215 Published 2021-12-26 No fix listed CWE-77

TI-2021-20689 CVE-2021-45602 · GHSA-g3q6-9jxv-cjjg

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 35

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00731 Published 2021-12-26 No fix listed CWE-78

TI-2021-20690 CVE-2021-45603 · GHSA-qx9q-hrrj-rj5g

Certain NETGEAR devices are affected by disclosure of sensitive information.

LOW 28

Certain NETGEAR devices are affected by disclosure of sensitive information.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00598 Published 2021-12-26 No fix listed CWE-200

TI-2021-20705 CVE-2021-45618 · GHSA-8fp7-34g5-gw45

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0202 Published 2021-12-26 No fix listed CWE-77

TI-2021-20706 CVE-2021-45619 · GHSA-h67v-rx96-6f59

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 47

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02588 Published 2021-12-26 No fix listed CWE-77

TI-2021-20710 CVE-2021-45623 · GHSA-7vrx-cj52-fjp6

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 45

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01687 Published 2021-12-26 No fix listed CWE-77

TI-2021-20727 CVE-2021-45640 · GHSA-6rr5-9j7h-58cj

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 33

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0065 Published 2021-12-26 No fix listed

TI-2021-20728 CVE-2021-45641 · GHSA-9j28-327w-4vrh

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 39

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00718 Published 2021-12-26 No fix listed

TI-2021-20729 CVE-2021-45642 · GHSA-6w4x-5fpc-6gg8

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 35

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 7.5 Adjacent network High privileges No interaction EPSS 0.00971 Published 2021-12-26 No fix listed

TI-2021-20745 CVE-2021-45658 · GHSA-7j2w-pcvm-23jm

Certain NETGEAR devices are affected by server-side injection.

MEDIUM 44

Certain NETGEAR devices are affected by server-side injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00847 Published 2021-12-26 No fix listed CWE-74

TI-2021-16116 CVE-2021-38516 · GHSA-73gm-85xf-8699

Certain NETGEAR devices are affected by lack of access control at the function level.

MEDIUM 46

Certain NETGEAR devices are affected by lack of access control at the function level.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01349 Published 2021-08-11 No fix listed

TI-2021-16125 CVE-2021-38525 · GHSA-h98g-ff23-mc6v

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 34

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01019 Published 2021-08-11 No fix listed CWE-787

TI-2021-16129 CVE-2021-38529 · GHSA-cc43-2hj7-x446

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 45

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01658 Published 2021-08-11 No fix listed CWE-77

TI-2021-16138 CVE-2021-38538 · GHSA-x2c3-fm9j-hhf2

Certain NETGEAR devices are affected by stored XSS.

LOW 28

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 6.3 Local No auth User interaction EPSS 0.004 Published 2021-08-10 No fix listed CWE-79

TI-2021-16114 CVE-2021-38514 · GHSA-3mfx-6prr-4g43

Certain NETGEAR devices are affected by authentication bypass.

LOW 15

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00772 Published 2021-08-10 No fix listed

TI-2021-08793 CVE-2021-27253 · GHSA-xj23-fxfm-58rq

Heap-based buffer overflow in NETGEAR R7800

MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0125 Published 2021-04-14 No fix listed CWE-122

TI-2021-08792 CVE-2021-27252 · GHSA-gqcm-w2xr-9g8j

OS command injection in NETGEAR R7800

MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0124 Published 2021-04-14 No fix listed CWE-78

TI-2021-08791 CVE-2021-27251 · GHSA-2wc2-8hhf-wr42

Cleartext transmission of sensitive information in NETGEAR R7800

MEDIUM 40

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00811 Published 2021-04-14 No fix listed CWE-319

TI-2021-09955 CVE-2021-29068 · GHSA-4223-wcr9-hvjq

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

MEDIUM 45

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01093 Published 2021-03-23 No fix listed CWE-120

Vulnerabilities

Filters