Vulnerabilities

TI-2026-00277 CVE-2026-0415 · GHSA-q37p-q3j4-w7g6

Insufficient input validation vulnerability in certain Orbi routers

LOW 19

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

CVSS 4.0MEDIUM 4.3 Adjacent network High privileges No interaction EPSS 0.00229 Published 2026-06-09 Fixed in V9.12.4.9, V7.2.8.5 CWE-20

TI-2026-00275 CVE-2026-0413 · GHSA-5vq9-cj6j-3h3r

Buffer overflow vulnerability in certain NETGEAR Nighthawk routers

LOW 20

A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software an…

CVSS 4.0MEDIUM 4.3 Adjacent network High privileges No interaction EPSS 0.00323 Published 2026-06-09 Fixed in V12.1.2.1, V10.5.20.10 +1 CWE-121

TI-2026-00280 CVE-2026-0418 · GHSA-5gqq-ch9p-4h64

Certain NETGEAR devices allow administrators to tamper with system

LOW 20

Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.

CVSS 4.0MEDIUM 4.3 Adjacent network High privileges No interaction EPSS 0.00245 Published 2026-06-09 Fixed in v4.6.14.4, V1.1.7.128 +8 CWE-15

TI-2026-00266 CVE-2026-0404 · GHSA-jvf4-gm9f-33g9

Insufficient input validation in NETGEAR Orbi routers

LOW 26

An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows network adjacent attackers authenticated over WiFi or on LAN to execute OS command injections on the router.

CVSS 4.0MEDIUM 4.8 Adjacent network Low privileges No interaction EPSS 0.01062 Published 2026-01-13 Fixed in v7.2.8.5 CWE-20

TI-2026-00267 CVE-2026-0405 · GHSA-2cqm-696m-6jx3

Authentication Bypass in NETGEAR Orbi Devices

LOW 29

An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.

CVSS 4.0MEDIUM 6.1 Adjacent network Low privileges No interaction EPSS 0.00361 Published 2026-01-13 Fixed in v9.13.2.1, V4.6.14.8 +4 CWE-287

TI-2026-00265 CVE-2026-0403 · GHSA-52xc-q9g5-mc6m

Insufficient input validation in NETGEAR Orbi routers

LOW 9

An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.

CVSS 4.0LOW 1.1 Adjacent network High privileges No interaction EPSS 0.0033 Published 2026-01-13 Fixed in v7.2.7.15, V7.2.8.5 +2 CWE-20

TI-2021-20589 CVE-2021-45502 · GHSA-rw4w-f599-mv6q

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 42

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.0058 Published 2021-12-26 No fix listed

TI-2021-20590 CVE-2021-45503 · GHSA-hhgr-7cc2-hwjp

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 42

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00475 Published 2021-12-26 No fix listed

TI-2021-20591 CVE-2021-45504 · GHSA-25g7-4hx6-524h

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 44

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01181 Published 2021-12-26 No fix listed

TI-2021-20592 CVE-2021-45505 · GHSA-3r3r-8fjq-x3wq

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 42

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00474 Published 2021-12-26 No fix listed

TI-2021-20593 CVE-2021-45506 · GHSA-3rwg-qf5g-xvjv

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 42

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00474 Published 2021-12-26 No fix listed

TI-2021-20594 CVE-2021-45507 · GHSA-qfrw-2r49-g452

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 45

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01525 Published 2021-12-26 No fix listed

TI-2021-20596 CVE-2021-45509 · GHSA-gr55-r58c-wmfq

Certain NETGEAR devices are affected by authentication bypass.

MEDIUM 44

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01181 Published 2021-12-26 No fix listed

TI-2021-20602 CVE-2021-45515 · GHSA-m98v-p9vf-rj56

Certain NETGEAR devices are affected by denial of service.

LOW 29

Certain NETGEAR devices are affected by denial of service.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00475 Published 2021-12-26 No fix listed

TI-2021-20603 CVE-2021-45516 · GHSA-ww8f-mqhh-q395

Certain NETGEAR devices are affected by denial of service.

LOW 31

Certain NETGEAR devices are affected by denial of service.

CVSS 3.1MEDIUM 6.9 Adjacent network High privileges No interaction EPSS 0.00405 Published 2021-12-26 No fix listed

TI-2021-20614 CVE-2021-45527 · GHSA-h529-hgpf-hm97

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

MEDIUM 44

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01176 Published 2021-12-26 No fix listed CWE-120

TI-2021-20620 CVE-2021-45533 · GHSA-36rp-gvh3-pg5v

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 37

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00631 Published 2021-12-26 No fix listed CWE-77

TI-2021-20622 CVE-2021-45535 · GHSA-qxqv-hm2h-mx78

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 37

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00633 Published 2021-12-26 No fix listed CWE-77

TI-2021-20623 CVE-2021-45536 · GHSA-f2hh-pf9m-f3w4

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 38

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00748 Published 2021-12-26 No fix listed CWE-77

TI-2021-20624 CVE-2021-45537 · GHSA-8mvv-3xxr-4jvf

Certain NETGEAR devices are affected by command injection by an authenticated user .

LOW 37

Certain NETGEAR devices are affected by command injection by an authenticated user .

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00631 Published 2021-12-26 No fix listed CWE-77

TI-2021-20625 CVE-2021-45538 · GHSA-4crx-744v-8g3j

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 37

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00631 Published 2021-12-26 No fix listed CWE-77

TI-2021-20628 CVE-2021-45541 · GHSA-373m-pcmj-4448

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 41

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01482 Published 2021-12-26 No fix listed CWE-77

TI-2021-20629 CVE-2021-45542 · GHSA-v7xw-65g3-rxf5

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 37

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00631 Published 2021-12-26 No fix listed CWE-77

TI-2021-20630 CVE-2021-45543 · GHSA-h5px-m9jr-jfxc

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 37

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00638 Published 2021-12-26 No fix listed CWE-77

TI-2021-20631 CVE-2021-45544 · GHSA-j2hr-ch2h-5xrw

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 41

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01482 Published 2021-12-26 No fix listed CWE-77

Vulnerabilities

Filters