Login Request a demo
RF
Product
R6400v2 Firmware
by Netgear · last CVE Jun 9, 2026
49
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities49In the news0Timeline
Severity mix
Critical 13High 15Medium 21Low 0
Severity
All severities49Critical13High15Medium21Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add R6400v2 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-45554
6.8
1%
Dec 26
Certain NETGEAR devices are affected by command injection by an authenticated user
Affected: before 1.0.4.118
CVE-2021-34983
6.5
0%
May 7
NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability
Affected: before 1.0.4.120
CVE-2021-45643
6.5
0%
Dec 26
Certain NETGEAR devices are affected by incorrect configuration of security settings
Affected: before 1.0.4.118
CVE-2024-52026
5.7
0%
Nov 5
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at bsw_pppoe.cgi
Affected: 1.0.4.128
CVE-2024-52025
5.7
0%
Nov 5
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at geniepppoe.cgi
Affected: 1.0.4.128
CVE-2024-52024
5.7
0%
Nov 5
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at wizpppoe.cgi
Affected: 1.0.4.128
CVE-2024-52023
5.7
0%
Nov 5
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe2.cgi
Affected: 1.0.4.128
CVE-2024-52016
5.7
0%
Nov 5
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component wlg_adv.cgi via…
Affected: 1.0.4.128
CVE-2024-52015
5.7
0%
Nov 5
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at bsw_pptp.cgi
Affected: 1.0.4.128
CVE-2024-52014
5.7
0%
Nov 5
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at genie_pptp.cgi
Affected: 1.0.4.128
CVE-2024-52013
5.7
0%
Nov 5
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at wiz_pptp.cgi
Affected: 1.0.4.128
CVE-2024-51011
5.7
0%
Nov 5
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe.cgi
Affected: 1.0.4.128
CVE-2024-51003
5.7
0%
Nov 5
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component ap_mode.cgi via…
Affected: 1.0.4.128
CVE-2024-51002
5.7
0%
Nov 5
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the l2tp_user_ip parameter at l2tp.cgi
Affected: 1.0.4.128
CVE-2024-50997
5.7
0%
Nov 5
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at pptp.cgi
Affected: 1.0.4.128
CVE-2024-50996
5.7
0%
Nov 5
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the bpa_server parameter at genie_bpa.cgi
Affected: 1.0.4.128
CVE-2021-45649
5.5
0%
Dec 26
Certain NETGEAR devices are affected by disclosure of sensitive information
Affected: before 1.0.4.84
CVE-2020-26918
4.8
1%
Oct 9
Certain NETGEAR devices are affected by stored XSS
Affected: before 1.0.2.66
CVE-2020-26917
4.8
1%
Oct 9
Certain NETGEAR devices are affected by stored XSS
Affected: before 1.0.2.66
CVE-2026-0417
4.5
0%
Jun 9
Insufficient input validation in certain NETGEAR routers
Affected: before 1.0.4.128
CVE-2026-9210
4.5
0%
Jun 9
Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router
Affected: before 1.0.4.128
Showing 21