RF
Product
R6260 Firmware
58
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 35Medium 13Low 0
Watch
Add R6260 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-45644 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.1.0.84 |
| CVE-2021-45637 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.1.0.76 |
| CVE-2021-45511 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.1.0.84 |
| CVE-2021-45501 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.1.0.84 |
| CVE-2021-38516 | 9.8 | Aug 11 | Certain NETGEAR devices are affected by lack of access control at the function level Affected: before 1.1.0.40 |
| CVE-2020-35799 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.1.0.40 |
| CVE-2020-35795 | 9.8 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.1.0.76 |
| CVE-2020-26927 | 9.8 | Oct 9 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.1.0.66 |
| CVE-2020-26908 | 9.8 | Oct 9 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.1.0.64 |
| CVE-2020-35800 | 9.4 | Dec 30 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.1.0.76 |
| CVE-2021-34865 | 8.8 | Jan 25 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR routers Affected: before 1.1.0.84 |
| CVE-2021-34980 | 8.8 | Jan 13 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers Affected: 1.1.0.78_1.0.1 |
| CVE-2021-34979 | 8.8 | Jan 13 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers Affected: 1.1.0.78_1.0.1 |
| CVE-2021-34978 | 8.8 | Jan 13 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 routers Affected: 1.1.0.78_1.0.1 |
| CVE-2021-45573 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.1.0.76 |
| CVE-2021-45551 | 8.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.1.0.64 |
| CVE-2021-29068 | 8.8 | Mar 23 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.1.0.76 |
| CVE-2020-27866 | 8.8 | Feb 12 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2,… Affected: before 1.1.0.78 |
| CVE-2020-27872 | 8.8 | Feb 4 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers Affected: before 1.1.0.78 |
| CVE-2020-26912 | 8.8 | Oct 9 | Certain NETGEAR devices are affected by CSRF Affected: before 1.1.0.64 |
| CVE-2020-26911 | 8.8 | Oct 9 | Certain NETGEAR devices are affected by lack of access control at the function level Affected: before 1.1.0.64 |
| CVE-2019-20686 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.1.0.64 |
| CVE-2019-20685 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.1.0.40 |
| CVE-2019-20684 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.1.0.40 |
| CVE-2019-20683 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.1.0.40 |
| CVE-2019-20682 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.1.0.40 |
| CVE-2019-20681 | 8.8 | Apr 15 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.1.0.64 |
| CVE-2019-20656 | 8.8 | Apr 15 | Certain NETGEAR devices are affected by a hardcoded password Affected: before 1.1.0.64 |
| CVE-2020-11788 | 8.8 | Apr 15 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.1.0.64 |
| CVE-2019-20640 | 8.8 | Apr 15 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.1.0.40 |
| CVE-2020-11770 | 8.8 | Apr 15 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.1.0.64 |
| CVE-2020-35787 | 8.0 | Dec 30 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.1.0.64 |
| CVE-2019-20680 | 8.0 | Apr 15 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.1.0.64 |
| CVE-2019-20657 | 8.0 | Apr 15 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.1.0.64 |
| CVE-2021-45657 | 7.8 | Dec 26 | Certain NETGEAR devices are affected by server-side injection Affected: before 1.1.0.78 |
| CVE-2021-45656 | 7.8 | Dec 26 | Certain NETGEAR devices are affected by server-side injection Affected: before 1.1.0.78 |
| CVE-2021-45534 | 7.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.1.0.84 |
| CVE-2022-40619 | 7.7 | Jan 28 | FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices Affected: before 1.1.0.88 |
| CVE-2022-40620 | 7.7 | Jan 28 | FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its… Affected: before 1.1.0.88 |
| CVE-2020-35841 | 7.6 | Dec 30 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.1.0.76 |
| CVE-2025-12942 | 7.5 | Nov 11 | Improper input validation in NETGEAR R6260 and R6850 Affected: before 1.1.0.86 |
| CVE-2021-45647 | 7.5 | Dec 26 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.1.0.78 |
| CVE-2021-38531 | 7.2 | Aug 11 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.1.0.78 |
| CVE-2021-38525 | 7.2 | Aug 11 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.1.0.64 |
| CVE-2020-26914 | 7.1 | Oct 9 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.1.0.64 |
| CVE-2020-27867 | 6.8 | Feb 12 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2,… Affected: before 1.1.0.78 |
| CVE-2020-27873 | 6.5 | Feb 4 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers Affected: before 1.1.0.78 |
| CVE-2020-17409 | 6.5 | Oct 13 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6260, R6220, R6020, JNR3210, and WNR2020… Affected: before 1.1.0.76 |
| CVE-2020-26916 | 6.3 | Oct 9 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.1.0.64 |
| CVE-2020-35842 | 5.4 | Dec 30 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.1.0.76 |