Priority LOW 20
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
CVSS 4.0MEDIUM 4.3· Adjacent network · High privileges · No interaction · EPSS 0.00403 · Published 2026-08-11 · Fixed in V1.2.14.114, V1.0.7.66 CWE-20
Priority LOW 29
A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality…
CVSS 4.0MEDIUM 4.9· Adjacent network · No auth · No interaction · EPSS 0.02183 · Published 2026-08-11 · Fixed in V1.0.1.84, V1.1.8.142 +9 CWE-295
Priority LOW 20
An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting the product's…
CVSS 4.0MEDIUM 4.6· Network · No auth · No interaction · EPSS 0.00135 · Published 2026-06-09 · Fixed in V1.2.9.52, V1.0.6.106 CWE-325
Priority LOW 27
Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.
CVSS 4.0MEDIUM 5.6· Adjacent network · Low privileges · No interaction · EPSS 0.0027 · Published 2026-06-09 · Fixed in V2.6.4.60, V2.7.6.8 +8 CWE-20
Priority LOW 35
FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its auto-update mechanism.
CVSS 3.1HIGH 7.7· Network · No auth · No interaction · EPSS 0.00315 · Published 2026-01-28 · No fix listed CWE-295
Priority MEDIUM 40
FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices.
CVSS 3.1HIGH 7.7· Network · No auth · No interaction · EPSS 0.02526 · Published 2026-01-28 · No fix listed CWE-77
Priority MEDIUM 41
NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.0HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00549 · Published 2024-05-07 · No fix listed CWE-787
Priority MEDIUM 40
Certain NETGEAR devices are affected by command injection by an authenticated user.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00953 · Published 2021-12-26 · No fix listed CWE-77
Priority LOW 34
Certain NETGEAR devices are affected by command injection by an authenticated user.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01215 · Published 2021-12-26 · No fix listed CWE-77
Priority MEDIUM 46
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0202 · Published 2021-12-26 · No fix listed CWE-77
Priority MEDIUM 47
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02588 · Published 2021-12-26 · No fix listed CWE-77
Priority LOW 35
Certain NETGEAR devices are affected by incorrect configuration of security settings.
CVSS 3.1HIGH 7.5· Adjacent network · High privileges · No interaction · EPSS 0.00971 · Published 2021-12-26 · No fix listed
Priority MEDIUM 44
Certain NETGEAR devices are affected by server-side injection.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00847 · Published 2021-12-26 · No fix listed CWE-74
Priority MEDIUM 46
Certain NETGEAR devices are affected by lack of access control at the function level.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.01349 · Published 2021-08-11 · No fix listed
Priority LOW 28
Certain NETGEAR devices are affected by stored XSS.
CVSS 3.1MEDIUM 6.3· Local · No auth · User interaction · EPSS 0.004 · Published 2021-08-10 · No fix listed CWE-79
Priority MEDIUM 45
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.01093 · Published 2021-03-23 · No fix listed CWE-120
Priority LOW 28
Certain NETGEAR devices are affected by stored XSS.
CVSS 3.1MEDIUM 6.1· Adjacent network · High privileges · No interaction · EPSS 0.0056 · Published 2020-12-29 · No fix listed CWE-79
Priority LOW 27
Certain NETGEAR devices are affected by stored XSS.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00423 · Published 2020-12-29 · No fix listed CWE-79
Priority LOW 27
Certain NETGEAR devices are affected by stored XSS.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00516 · Published 2020-12-29 · No fix listed CWE-79
Priority LOW 28
Certain NETGEAR devices are affected by stored XSS.
CVSS 3.1MEDIUM 6.1· Adjacent network · High privileges · No interaction · EPSS 0.00656 · Published 2020-12-29 · No fix listed CWE-79
Priority LOW 28
Certain NETGEAR devices are affected by stored XSS.
CVSS 3.1MEDIUM 6.1· Adjacent network · High privileges · No interaction · EPSS 0.00656 · Published 2020-12-29 · No fix listed CWE-79
Priority LOW 28
Certain NETGEAR devices are affected by stored XSS.
CVSS 3.1MEDIUM 6.1· Adjacent network · High privileges · No interaction · EPSS 0.0056 · Published 2020-12-29 · No fix listed CWE-79
Priority LOW 28
Certain NETGEAR devices are affected by stored XSS.
CVSS 3.1MEDIUM 6.1· Adjacent network · High privileges · No interaction · EPSS 0.0056 · Published 2020-12-29 · No fix listed CWE-79
Priority LOW 28
Certain NETGEAR devices are affected by stored XSS.
CVSS 3.1MEDIUM 6.1· Adjacent network · High privileges · No interaction · EPSS 0.0056 · Published 2020-12-29 · No fix listed CWE-79
Priority LOW 28
Certain NETGEAR devices are affected by stored XSS.
CVSS 3.1MEDIUM 6.1· Adjacent network · High privileges · No interaction · EPSS 0.0056 · Published 2020-12-29 · No fix listed CWE-79
Load more
THREATIST.IORead the docs