- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Severity across 148 analyzed records
As of 09/11/2026, Netgear recorded 12 security vulnerabilities in the last 90 days across 61 products, including 0 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, RAXE500 had the most security vulnerabilities in the Netgear ecosystem, with 4 vulnerabilities—approximately 33.33% of the provider's total vulnerabilities during this period.
| CVE | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-9216Insufficient input validation vulnerability exists in certain NETGEAR RAX Models | Exploitation statusNot known exploited | FixYes | Affected productRAX30 | Published09/08/2026 | SeverityLow |
CVE-2026-9215A CSRF vulnerability exists in certain NETGEAR XR series devices | Exploitation statusNot known exploited | FixYes | Affected productXR1000 | Published09/08/2026 | SeverityLow |
CVE-2026-62659Authenticated users can make unauthorized changes on NETGEAR WAX333 Access Points | Exploitation statusNot known exploited | FixYes | Affected productWAX333 | Published07/14/2026 | SeverityMedium |
CVE-2026-15757Insufficient input validation vulnerability in NETGEAR DGND3700v1 modem router | Exploitation statusNot known exploited | FixYes | Affected productDGND3700v1 | Published07/14/2026 | SeverityMedium |
CVE-2026-62656Post-authenticated command injection vulnerability found in certain NETGEAR RAX models | Exploitation statusNot known exploited | FixYes | Affected productRAXE450 | Published07/14/2026 | SeverityMedium |
CVE-2026-62655A DoS vulnerability due to stack overflow exists in certain NETGEAR Orbi models | Exploitation statusNot known exploited | FixYes | Affected productRBR860 | Published07/14/2026 | SeverityMedium |
CVE-2026-62657Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models | Exploitation statusNot known exploited | FixYes | Affected productMR70 | Published07/14/2026 | SeverityMedium |
CVE-2026-62658Post-authentication Command Injection Vulnerability in certain Nighthawk RAX series models | Exploitation statusNot known exploited | FixYes | Affected productRAX43 | Published07/14/2026 | SeverityMedium |
CVE-2026-24714CVE-2026-24714 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNETGEAR products | Published01/30/2026 | SeverityHigh |
CVE-2026-0404Insufficient input validation in NETGEAR Orbi routers | Exploitation statusNot known exploited | FixYes | Affected productRBRE960 | Published01/13/2026 | SeverityMedium |
CVE-2026-0408Path traversal vulnerability in Netgear WiFi Range Extenders | Exploitation statusNot known exploited | FixYes | Affected productEX5000 | Published01/13/2026 | SeverityMedium |
CVE-2026-0407Authentication bypass in NETGEAR WiFi Range Extenders via network adjacent attacks | Exploitation statusNot known exploited | FixYes | Affected productEX5000 | Published01/13/2026 | SeverityMedium |
CVE-2026-0406Insufficient input validation in NETGEAR Nighthawk router XR1000v2 | Exploitation statusNot known exploited | FixYes | Affected productXR1000v2 | Published01/13/2026 | SeverityMedium |
CVE-2026-0405Authentication Bypass in NETGEAR Orbi Devices | Exploitation statusNot known exploited | FixYes | Affected productRBE970 | Published01/13/2026 | SeverityMedium |
CVE-2026-0403Insufficient input validation in NETGEAR Orbi routers | Exploitation statusNot known exploited | FixYes | Affected productRBR750 | Published01/13/2026 | SeverityLow |
CVE-2025-12946Improper input validation in NETGEAR Nighthawk routers | Exploitation statusNot known exploited | FixYes | Affected productRS700 | Published12/09/2025 | SeverityMedium |
CVE-2025-12941Denial of Service Vulnerability in NETGEAR C6220 and C6230 | Exploitation statusNot known exploited | FixYes | Affected productC6220 | Published12/09/2025 | SeverityMedium |
CVE-2025-12944Improper input validation in NETGEAR DGN2200v4 | Exploitation statusNot known exploited | FixYes | Affected productDGN2200v4 | Published11/11/2025 | SeverityMedium |
CVE-2025-12943Improper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE300 | Exploitation statusNot known exploited | FixYes | Affected productRAX30 | Published11/11/2025 | SeverityMedium |
CVE-2025-12942Improper input validation in NETGEAR R6260 and R6850 | Exploitation statusNot known exploited | FixYes | Affected productR6260 | Published11/11/2025 | SeverityMedium |
CVE-2025-12940Credentials recorded in logs in NETGEAR WAX610 and WAX610Y | Exploitation statusNot known exploited | FixYes | Affected productWAX610 | Published11/11/2025 | SeverityLow |
CVE-2013-10063Netgear SPH200D <= 1.0.4.80 Path Traversal via HTTP GET | Exploitation statusPublic exploit | FixYes | Affected productSPH200D | Published08/01/2025 | SeverityMedium |
CVE-2013-10060Netgear Routers pppoe.cgi RCE | Exploitation statusPublic exploit | FixYes | Affected productDGN2200B | Published08/01/2025 | SeverityCritical |
CVE-2013-10061Netgear Routers setup.cgi RCE | Exploitation statusPublic exploit | FixNot confirmed | Affected productDGN1000B | Published08/01/2025 | SeverityHigh |
CVE-2025-7407Netgear D6400 diag.cgi os command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productD6400 | Published07/10/2025 | SeverityMedium |
CVE-2025-6565Netgear WNCE3001 HTTP POST Request http_d stack-based overflow | Exploitation statusPublic exploit | FixNot confirmed | Affected productWNCE3001 | Published06/24/2025 | SeverityHigh |
CVE-2025-6511Netgear EX6150 sub_410090 stack-based overflow | Exploitation statusPublic exploit | FixNot confirmed | Affected productEX6150 | Published06/23/2025 | SeverityHigh |
CVE-2025-6510Netgear EX6100 sub_415EF8 stack-based overflow | Exploitation statusPublic exploit | FixNot confirmed | Affected productEX6100 | Published06/23/2025 | SeverityHigh |
CVE-2025-5934Netgear EX3700 mtd sub_41619C stack-based overflow | Exploitation statusPublic exploit | FixNot confirmed | Affected productEX3700 | Published06/10/2025 | SeverityHigh |
CVE-2025-5495Netgear WNR614 URL improper authentication | Exploitation statusPublic exploit | FixNot confirmed | Affected productWNR614 | Published06/03/2025 | SeverityMedium |
CVE-2025-4980Netgear DGND3700 mini_http currentsetting.htm information disclosure | Exploitation statusPublic exploit | FixNot confirmed | Affected productDGND3700 | Published05/20/2025 | SeverityMedium |
CVE-2025-4978Netgear DGND3700 Basic Authentication BRS_top.html improper authentication | Exploitation statusPublic exploit | FixNot confirmed | Affected productDGND3700 | Published05/20/2025 | SeverityCritical |
CVE-2025-4977Netgear DGND3700 BRS_top.html information disclosure | Exploitation statusPublic exploit | FixNot confirmed | Affected productDGND3700 | Published05/20/2025 | SeverityMedium |
CVE-2025-4150Netgear EX6200 sub_54340 buffer overflow | Exploitation statusNot known exploited | FixNot confirmed | Affected productEX6200 | Published05/01/2025 | SeverityHigh |
CVE-2025-4149Netgear EX6200 sub_54014 buffer overflow | Exploitation statusNot known exploited | FixNot confirmed | Affected productEX6200 | Published05/01/2025 | SeverityHigh |
CVE-2025-4148Netgear EX6200 sub_503FC buffer overflow | Exploitation statusNot known exploited | FixNot confirmed | Affected productEX6200 | Published05/01/2025 | SeverityHigh |
CVE-2025-4147Netgear EX6200 sub_47F7C buffer overflow | Exploitation statusNot known exploited | FixNot confirmed | Affected productEX6200 | Published05/01/2025 | SeverityHigh |
CVE-2025-4146Netgear EX6200 sub_41940 buffer overflow | Exploitation statusNot known exploited | FixNot confirmed | Affected productEX6200 | Published05/01/2025 | SeverityHigh |
CVE-2025-4145Netgear EX6200 sub_3D0BC buffer overflow | Exploitation statusNot known exploited | FixNot confirmed | Affected productEX6200 | Published05/01/2025 | SeverityHigh |
CVE-2025-4142Netgear EX6200 sub_3C8EC buffer overflow | Exploitation statusNot known exploited | FixNot confirmed | Affected productEX6200 | Published04/30/2025 | SeverityHigh |
CVE-2025-4141Netgear EX6200 sub_3C03C buffer overflow | Exploitation statusNot known exploited | FixNot confirmed | Affected productEX6200 | Published04/30/2025 | SeverityHigh |
CVE-2025-4140Netgear EX6120 sub_30394 buffer overflow | Exploitation statusNot known exploited | FixNot confirmed | Affected productEX6120 | Published04/30/2025 | SeverityHigh |
CVE-2025-4139Netgear EX6120 fwAcosCgiInbound buffer overflow | Exploitation statusNot known exploited | FixNot confirmed | Affected productEX6120 | Published04/30/2025 | SeverityHigh |
CVE-2025-4135Netgear WG302v2 ui_get_input_value command injection | Exploitation statusNot known exploited | FixYes | Affected productWG302v2 | Published04/30/2025 | SeverityMedium |
CVE-2025-4122Netgear JWNR2000v2 sub_435E04 command injection | Exploitation statusNot known exploited | FixNot confirmed | Affected productJWNR2000v2 | Published04/30/2025 | SeverityMedium |
CVE-2025-4121Netgear JWNR2000v2 cmd_wireless command injection | Exploitation statusNot known exploited | FixNot confirmed | Affected productJWNR2000v2 | Published04/30/2025 | SeverityMedium |
CVE-2025-4120Netgear JWNR2000v2 sub_4238E8 buffer overflow | Exploitation statusNot known exploited | FixNot confirmed | Affected productJWNR2000v2 | Published04/30/2025 | SeverityHigh |
CVE-2025-4117Netgear JWNR2000v2 sub_41A914 buffer overflow | Exploitation statusNot known exploited | FixNot confirmed | Affected productJWNR2000v2 | Published04/30/2025 | SeverityMedium |
CVE-2025-4116Netgear JWNR2000v2 get_cur_lang_ver buffer overflow | Exploitation statusNot known exploited | FixNot confirmed | Affected productJWNR2000v2 | Published04/30/2025 | SeverityHigh |
CVE-2025-4115Netgear JWNR2000v2 default_version_is_new buffer overflow | Exploitation statusNot known exploited | FixNot confirmed | Affected productJWNR2000v2 | Published04/30/2025 | SeverityHigh |
CVE-2025-4114Netgear JWNR2000v2 check_language_file buffer overflow | Exploitation statusNot known exploited | FixNot confirmed | Affected productJWNR2000v2 | Published04/30/2025 | SeverityHigh |
CVE-2025-25246CVE-2025-25246 | Exploitation statusNot known exploited | FixYes | Affected productXR1000 | Published02/05/2025 | SeverityHigh |
CVE-2024-23690EOL Netgear FVS336v3 Telnet Configuration Backup Command Injection | Exploitation statusNot known exploited | FixYes | Affected productFVS336Gv3 | Published02/04/2025 | SeverityHigh |
CVE-2024-12847NETGEAR DGN setup.cgi OS Command Injection | Exploitation statusPublic exploit | FixYes | Affected productDGN1000 | Published01/10/2025 | SeverityCritical |
CVE-2024-12988Netgear R6900P/R7000P HTTP Header sub_16C4C buffer overflow | Exploitation statusPublic exploit | FixNot confirmed | Affected productR6900P | Published12/27/2024 | SeverityMedium |
CVE-2024-12147Netgear R6900 HTTP Header upgrade_check.cgi buffer overflow | Exploitation statusPublic exploit | FixNot confirmed | Affected productR6900 | Published12/04/2024 | SeverityHigh |
CVE-2023-51635NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productRAX30 | Published11/22/2024 | SeverityHigh |
CVE-2023-51634NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productRAX30 | Published11/22/2024 | SeverityHigh |
CVE-2024-6814NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productProSAFE Network Management System | Published08/21/2024 | SeverityHigh |
CVE-2024-6813NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productProSAFE Network Management System | Published08/21/2024 | SeverityHigh |
CVE-2024-7153Netgear WN604 siteSurvey.php direct request | Exploitation statusPublic exploit | FixNot confirmed | Affected productWN604 | Published07/27/2024 | SeverityMedium |
CVE-2024-6646Netgear WN604 Web Interface downloadFile.php information disclosure | Exploitation statusPublic exploit | FixNot confirmed | Affected productWN604 | Published07/10/2024 | SeverityMedium |
CVE-2024-5505NETGEAR ProSAFE Network Management System UpLoadServlet Directory Traversal Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productProSAFE Network Management System | Published06/06/2024 | SeverityHigh |
CVE-2024-5247NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productProSAFE Network Management System | Published05/23/2024 | SeverityHigh |
CVE-2024-5246NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productProSAFE Network Management System | Published05/23/2024 | SeverityHigh |
CVE-2024-5245NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productProSAFE Network Management System | Published05/23/2024 | SeverityHigh |
CVE-2022-43654NETGEAR CAX30S SSO Command Injection Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productCAX30S | Published05/07/2024 | SeverityHigh |
CVE-2021-34983NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productMultiple Routers | Published05/07/2024 | SeverityMedium |
CVE-2021-34982NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productMultiple Routers | Published05/07/2024 | SeverityHigh |
CVE-2021-34947NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productR7800 | Published05/07/2024 | SeverityHigh |
CVE-2023-50231NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productProSAFE Network Management System | Published05/03/2024 | SeverityHigh |
CVE-2023-44450NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productProSAFE Network Management System | Published05/03/2024 | SeverityHigh |
CVE-2023-44449NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productProSAFE Network Management System | Published05/03/2024 | SeverityHigh |
CVE-2023-44445NETGEAR CAX30 SSO Stack-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productCAX30 | Published05/03/2024 | SeverityHigh |
CVE-2023-41183NETGEAR Orbi 760 SOAP API Authentication Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productOrbi 760 | Published05/03/2024 | SeverityHigh |
CVE-2023-41182NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productProSAFE Network Management System | Published05/03/2024 | SeverityHigh |
CVE-2023-40480NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productRAX30 | Published05/03/2024 | SeverityHigh |
CVE-2023-40479NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productRAX30 | Published05/03/2024 | SeverityHigh |
CVE-2023-40478NETGEAR RAX30 Telnet CLI passwd Stack-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productRAX30 | Published05/03/2024 | SeverityHigh |
CVE-2023-38102NETGEAR ProSAFE Network Management System createUser Missing Authorization Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productProSAFE Network Management System | Published05/03/2024 | SeverityHigh |
CVE-2023-38101NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productProSAFE Network Management System | Published05/03/2024 | SeverityHigh |
CVE-2023-38100NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productProSAFE Network Management System | Published05/03/2024 | SeverityHigh |
CVE-2023-38099NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productProSAFE Network Management System | Published05/03/2024 | SeverityHigh |
CVE-2023-38098NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productProSAFE Network Management System | Published05/03/2024 | SeverityHigh |
CVE-2023-38097NETGEAR ProSAFE Network Management System BkreProcessThread Exposed Dangerous Function Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productProSAFE Network Management System | Published05/03/2024 | SeverityHigh |
CVE-2023-38096NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productProSAFE Network Management System | Published05/03/2024 | SeverityCritical |
CVE-2023-38095NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productProSAFE Network Management System | Published05/03/2024 | SeverityHigh |
CVE-2023-35722NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productRAX30 | Published05/03/2024 | SeverityHigh |
CVE-2023-35721NETGEAR Multiple Routers curl_post Improper Certificate Validation Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productMultiple Routers | Published05/03/2024 | SeverityHigh |
CVE-2023-34285NETGEAR RAX30 cmsCli_authenticate Stack-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productRAX30 | Published05/03/2024 | SeverityHigh |
CVE-2023-34284NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productRAX30 | Published05/03/2024 | SeverityMedium |
CVE-2023-34283NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productRAX30 | Published05/03/2024 | SeverityMedium |
CVE-2023-27370NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productRAX30 | Published05/03/2024 | SeverityMedium |
CVE-2023-27369NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productRAX30 | Published05/03/2024 | SeverityHigh |
CVE-2023-27368NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productRAX30 | Published05/03/2024 | SeverityHigh |
CVE-2023-27367NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productRAX30 | Published05/03/2024 | SeverityHigh |
CVE-2023-27361NETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productRAX30 | Published05/03/2024 | SeverityMedium |
CVE-2023-27360NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productRAX30 | Published05/03/2024 | SeverityHigh |
CVE-2023-27358NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productRAX30 | Published05/03/2024 | SeverityHigh |
CVE-2023-27357NETGEAR RAX30 GetInfo Missing Authentication Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productRAX30 | Published05/03/2024 | SeverityMedium |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan