Vulnerabilities

TI-2026-08100 CVE-2026-9215 · GHSA-m3w7-g2mp-8r99

A CSRF vulnerability exists in certain NETGEAR XR series devices

LOW 9

A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt r…

CVSS 4.0LOW 1.8 Adjacent network Low privileges User interaction EPSS 0.00195 Published 2026-09-08 Fixed in V1.1.0.22, v2.3.5.152 CWE-352

TI-2026-08097 CVE-2026-9212 · GHSA-wq28-w638-7xcv

Insufficient authentication and input validation in certain NETGEAR products

LOW 27

Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.

CVSS 4.0MEDIUM 5.6 Adjacent network Low privileges No interaction EPSS 0.0027 Published 2026-06-09 Fixed in V2.6.4.60, V2.7.6.8 +8 CWE-20

TI-2021-13937 CVE-2021-34947 · GHSA-jj28-565j-58r3

Out-of-bounds write in NETGEAR R7800

MEDIUM 41

NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00549 Published 2024-05-07 No fix listed CWE-787

TI-2021-20635 CVE-2021-45548 · GHSA-qq4v-p8xp-8526

Certain NETGEAR devices are affected by command injection by an authenticated user.

MEDIUM 40

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00953 Published 2021-12-26 No fix listed CWE-77

TI-2021-20637 CVE-2021-45550 · GHSA-hvp9-jp8f-v4wh

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 31

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00574 Published 2021-12-26 No fix listed CWE-77

TI-2021-20689 CVE-2021-45602 · GHSA-g3q6-9jxv-cjjg

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 35

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00731 Published 2021-12-26 No fix listed CWE-78

TI-2021-20690 CVE-2021-45603 · GHSA-qx9q-hrrj-rj5g

Certain NETGEAR devices are affected by disclosure of sensitive information.

LOW 28

Certain NETGEAR devices are affected by disclosure of sensitive information.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00598 Published 2021-12-26 No fix listed CWE-200

TI-2021-20705 CVE-2021-45618 · GHSA-8fp7-34g5-gw45

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 46

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0202 Published 2021-12-26 No fix listed CWE-77

TI-2021-20710 CVE-2021-45623 · GHSA-7vrx-cj52-fjp6

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 45

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01687 Published 2021-12-26 No fix listed CWE-77

TI-2021-20727 CVE-2021-45640 · GHSA-6rr5-9j7h-58cj

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 33

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0065 Published 2021-12-26 No fix listed

TI-2021-20728 CVE-2021-45641 · GHSA-9j28-327w-4vrh

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 39

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00718 Published 2021-12-26 No fix listed

TI-2021-20729 CVE-2021-45642 · GHSA-6w4x-5fpc-6gg8

Certain NETGEAR devices are affected by incorrect configuration of security settings.

LOW 35

Certain NETGEAR devices are affected by incorrect configuration of security settings.

CVSS 3.1HIGH 7.5 Adjacent network High privileges No interaction EPSS 0.00971 Published 2021-12-26 No fix listed

TI-2021-20745 CVE-2021-45658 · GHSA-7j2w-pcvm-23jm

Certain NETGEAR devices are affected by server-side injection.

MEDIUM 44

Certain NETGEAR devices are affected by server-side injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00847 Published 2021-12-26 No fix listed CWE-74

TI-2021-16116 CVE-2021-38516 · GHSA-73gm-85xf-8699

Certain NETGEAR devices are affected by lack of access control at the function level.

MEDIUM 46

Certain NETGEAR devices are affected by lack of access control at the function level.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01349 Published 2021-08-11 No fix listed

TI-2021-16125 CVE-2021-38525 · GHSA-h98g-ff23-mc6v

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated…

LOW 34

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01019 Published 2021-08-11 No fix listed CWE-787

TI-2021-16127 CVE-2021-38527 · GHSA-qccx-cxhf-2m4w

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

MEDIUM 45

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01685 Published 2021-08-11 No fix listed CWE-77

TI-2021-16134 CVE-2021-38534 · GHSA-fj76-v68g-qvc5

Certain NETGEAR devices are affected by stored XSS.

LOW 23

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00514 Published 2021-08-10 No fix listed CWE-79

TI-2021-16138 CVE-2021-38538 · GHSA-x2c3-fm9j-hhf2

Certain NETGEAR devices are affected by stored XSS.

LOW 28

Certain NETGEAR devices are affected by stored XSS.

CVSS 3.1MEDIUM 6.3 Local No auth User interaction EPSS 0.004 Published 2021-08-10 No fix listed CWE-79

TI-2021-16114 CVE-2021-38514 · GHSA-3mfx-6prr-4g43

Certain NETGEAR devices are affected by authentication bypass.

LOW 15

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00772 Published 2021-08-10 No fix listed

TI-2021-08793 CVE-2021-27253 · GHSA-xj23-fxfm-58rq

Heap-based buffer overflow in NETGEAR R7800

MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0125 Published 2021-04-14 No fix listed CWE-122

TI-2021-08792 CVE-2021-27252 · GHSA-gqcm-w2xr-9g8j

OS command injection in NETGEAR R7800

MEDIUM 41

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0124 Published 2021-04-14 No fix listed CWE-78

TI-2021-08791 CVE-2021-27251 · GHSA-2wc2-8hhf-wr42

Cleartext transmission of sensitive information in NETGEAR R7800

MEDIUM 40

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00811 Published 2021-04-14 No fix listed CWE-319

TI-2021-09956 CVE-2021-29069 · GHSA-555x-pqp3-gc3h

Certain NETGEAR devices are affected by command injection by an authenticated user.

LOW 37

Certain NETGEAR devices are affected by command injection by an authenticated user.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00473 Published 2021-03-23 No fix listed CWE-77

TI-2021-09955 CVE-2021-29068 · GHSA-4223-wcr9-hvjq

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

MEDIUM 45

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01093 Published 2021-03-23 No fix listed CWE-120

TI-2021-08797 CVE-2021-27257 · GHSA-q57h-78h9-m59j

Improper certificate validation in NETGEAR R7800

LOW 29

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R7800 firmware version 1.0.2.76.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00323 Published 2021-03-05 No fix listed CWE-295

Vulnerabilities

Filters