RF
Product
R7000 Firmware
by Netgear · last CVE Aug 11, 2026
On CISA KEVExploited in the wild
140
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 21High 64Medium 54Low 1
Watch

Add R7000 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-6277
In wildKEV
8.8
100%
Dec 14
NETGEAR Multiple Routers Remote Code Execution Vulnerability
Affected: through 1.0.7.2_1.1.93
CVE-2021-34982
8.8
1%
May 7
NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability
Affected: before 1.0.11.128
CVE-2022-27646
8.8
1%
Mar 29
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers
Affected: before 1.0.11.134
CVE-2022-27645
8.8
1%
Mar 29
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers
Affected: before 1.0.11.134
CVE-2022-27644
8.8
0%
Mar 29
This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers
Affected: before 1.0.11.134
CVE-2022-27643
8.8
25%
Mar 29
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers
Affected: before 1.0.11.134
CVE-2022-27642
8.8
1%
Mar 29
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers
Affected: before 1.0.11.134
CVE-2022-27641
8.8
1%
Mar 29
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers
Affected: before 1.0.11.130
CVE-2021-34977
8.8
1%
Jan 13
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.116_10.2.100 routers
Affected: 1.0.11.116_10.2.100
CVE-2021-45641
8.8
1%
Dec 26
Certain NETGEAR devices are affected by incorrect configuration of security settings
Affected: before 1.0.9.34
CVE-2021-45607
8.8
1%
Dec 26
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user
Affected: before 1.0.11.126
CVE-2021-45606
8.8
1%
Dec 26
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user
Affected: before 1.0.11.126
CVE-2021-45605
8.8
1%
Dec 26
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user
Affected: before 1.0.11.116
CVE-2021-45553
8.8
1%
Dec 26
Certain NETGEAR devices are affected by command injection by an authenticated user
Affected: before 1.0.11.126
CVE-2021-45530
8.8
1%
Dec 26
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user
Affected: before 1.0.11.126
CVE-2021-45526
8.8
0%
Dec 26
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user
Affected: before 1.0.11.126
CVE-2021-45525
8.8
1%
Dec 26
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user
Affected: before 1.0.9.88
CVE-2021-34991
8.8
6%
Nov 15
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers
Affected: before 1.0.11.128
CVE-2021-38539
8.8
1%
Aug 11
Certain NETGEAR devices are affected by privilege escalation
Affected: before 1.0.9.42
CVE-2021-31802
8.8
14%
Apr 26
NETGEAR R7000 1.0.11.116 devices have a heap-based Buffer Overflow that is exploitable from the local network without authentication
Affected: through 1.0.11.116
CVE-2021-27239
8.8
1%
Mar 29
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers
Affected: before 1.0.11.116
CVE-2021-29068
8.8
1%
Mar 23
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user
Affected: before 1.0.11.106
CVE-2017-18864
8.8
1%
May 5
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker
Affected: before 1.0.9.4
CVE-2018-21093
8.8
1%
Apr 27
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker
Affected: before 1.0.9.28
CVE-2017-18711
8.8
1%
Apr 24
Certain NETGEAR devices are affected by incorrect configuration of security settings
Affected: before 1.0.9.14
CVE-2017-18738
8.8
1%
Apr 23
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker
Affected: before 1.0.9.10
CVE-2017-18744
8.8
1%
Apr 23
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker
Affected: before 1.0.9.4
CVE-2017-18743
8.8
1%
Apr 23
Certain NETGEAR devices are affected by authentication bypass
Affected: before 1.0.7.10
CVE-2017-18756
8.8
1%
Apr 22
Certain NETGEAR devices are affected by incorrect configuration of security settings
Affected: before 1.0.9.14
CVE-2017-18762
8.8
2%
Apr 22
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker
Affected: before 1.0.9.10
CVE-2017-18772
8.8
1%
Apr 22
Certain NETGEAR devices are affected by authentication bypass
Affected: before 1.0.9.6
CVE-2019-20753
8.8
1%
Apr 16
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker
Affected: before 1.0.9.28
CVE-2019-20734
8.8
0%
Apr 16
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker
Affected: before 1.0.9.6
CVE-2020-11770
8.8
2%
Apr 15
Certain NETGEAR devices are affected by command injection by an authenticated user
Affected: before 1.0.9.42
CVE-2021-45540
8.4
1%
Dec 26
Certain NETGEAR devices are affected by command injection by an authenticated user
Affected: before 1.0.11.126
CVE-2017-18794
8.4
1%
Apr 21
Certain NETGEAR devices are affected by command injection
Affected: before 1.0.9.10
CVE-2017-18850
8.4
0%
Apr 20
Certain NETGEAR devices are affected by authentication bypass
Affected: before 1.0.9.4
CVE-2021-40847
8.1
10%
Sep 21
The update process of the Circle Parental Control Service on various NETGEAR routers allows remote attackers to achieve remote code execution as root via a MitM attack
Affected: 1.0.11.123
CVE-2021-29080
8.1
0%
Mar 23
Certain NETGEAR devices are affected by password reset by an unauthenticated attacker
Affected: before 1.0.11.116
CVE-2019-17372
8.1
2%
Oct 9
Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi
Affected: All versions, or not specified
CVE-2022-27647
8.0
1%
Mar 29
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers
Affected: before 1.0.11.134
CVE-2020-35787
8.0
0%
Dec 30
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user
Affected: before 1.0.9.42
CVE-2019-20758
8.0
0%
Apr 16
NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user
Affected: before 1.0.9.42
CVE-2019-20680
8.0
1%
Apr 15
Certain NETGEAR devices are affected by command injection by an authenticated user
Affected: before 1.0.9.60
CVE-2022-37234
7.8
1%
Sep 22
Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware
Affected: 1.0.11.134_10.2.119
CVE-2020-35798
7.8
1%
Dec 30
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker
Affected: before 1.0.11.100
CVE-2017-18777
7.8
0%
Apr 22
Certain NETGEAR devices are affected by administrative password disclosure
Affected: before 1.0.7.10
CVE-2017-18849
7.8
1%
Apr 20
Certain NETGEAR devices are affected by command injection
Affected: before 1.0.9.4
CVE-2022-40619
7.7
3%
Jan 28
FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices
Affected: before 1.0.11.134
CVE-2022-40620
7.7
0%
Jan 28
FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its…
Affected: before 1.0.11.134
Page 1 of 2 · 64 total