Vulnerabilities

TI-2026-00280 CVE-2026-0418 · GHSA-5gqq-ch9p-4h64

Certain NETGEAR devices allow administrators to tamper with system

LOW 20

Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.

CVSS 4.0MEDIUM 4.3 Adjacent network High privileges No interaction EPSS 0.00245 Published 2026-06-09 Fixed in v4.6.14.4, V1.1.7.128 +8 CWE-15

TI-2021-13973 CVE-2021-34983 · GHSA-2r4f-jfx8-mhm3

Missing authentication in NETGEAR Multiple Routers

LOW 29

NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability.

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00329 Published 2024-05-07 No fix listed CWE-306

TI-2021-13972 CVE-2021-34982 · GHSA-3g79-p8hq-4qgp

Stack-based buffer overflow in NETGEAR Multiple Routers

MEDIUM 41

NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00581 Published 2024-05-07 No fix listed CWE-121

TI-2022-10628 CVE-2022-27647 · GHSA-7pr7-x6mw-h647

OS command injection in NETGEAR R6700v3

MEDIUM 40

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.0148 Published 2023-03-29 No fix listed CWE-78

TI-2022-10626 CVE-2022-27645 · GHSA-jv3h-vgc4-3286

Missing authentication in NETGEAR R6700v3

MEDIUM 43

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01277 Published 2023-03-29 No fix listed CWE-306

TI-2022-10623 CVE-2022-27642 · GHSA-w94x-h737-f6h9

Incorrect authorization in NETGEAR R6700v3

MEDIUM 40

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00878 Published 2023-03-29 No fix listed CWE-863

TI-2021-20617 CVE-2021-45530 · GHSA-c22f-2mc2-g4mc

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

MEDIUM 40

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00896 Published 2021-12-26 No fix listed CWE-120

TI-2021-20626 CVE-2021-45539 · GHSA-f2mp-9rff-mjgp

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 37

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00631 Published 2021-12-26 No fix listed CWE-77

TI-2021-20636 CVE-2021-45549 · GHSA-m6m8-v67p-7g6q

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 37

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00633 Published 2021-12-26 No fix listed CWE-77

TI-2021-20691 CVE-2021-45604 · GHSA-cxv8-ggg4-fhvm

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 21

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1MEDIUM 4.5 Adjacent network High privileges No interaction EPSS 0.00381 Published 2021-12-26 No fix listed CWE-787

TI-2021-20697 CVE-2021-45610 · GHSA-m3x6-j75p-546g

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

MEDIUM 45

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01495 Published 2021-12-26 No fix listed CWE-120

TI-2021-20699 CVE-2021-45612 · GHSA-95h9-7v59-h6gr