NE
Vendor
Netgear
10,826
CVEs
71
On KEV
15
New 30D
Products
RA8.8
RAX30
NETGEAR
5 CVEs0 on KEV2 new
R74.5
R7300DST
NETGEAR
2 CVEs0 on KEV2 new
R74.9
R7000
NETGEAR
7 CVEs0 on KEV1 new
R77.5
R7000P
Netgear
4 CVEs0 on KEV1 new
EX5.4
EX6120
NETGEAR
3 CVEs0 on KEV1 new
RA5.9
RAX40
NETGEAR
3 CVEs0 on KEV1 new
RA8.8
RAXE300
NETGEAR
3 CVEs0 on KEV1 new
CA8.8
CAX30
NETGEAR
2 CVEs0 on KEV1 new
EX5.4
EX3700
NETGEAR
2 CVEs0 on KEV1 new
RA8.8
RAX28
NETGEAR
2 CVEs0 on KEV1 new
RA8.8
RAX29
NETGEAR
2 CVEs0 on KEV1 new
RA8.8
RAX5
NETGEAR
2 CVEs0 on KEV1 new
CB4.5
CBR40
NETGEAR
1 CVEs0 on KEV1 new
DF9.8
D6220 Firmware
Netgear
53 CVEs2 on KEV0 new
DF9.8
D6400 Firmware
Netgear
52 CVEs2 on KEV0 new
MD9.8
Multiple Devices
NETGEAR
2 CVEs2 on KEV0 new
RF9.8
R6700 Firmware
Netgear
173 CVEs1 on KEV0 new
DF9.8
D7800 Firmware
Netgear
172 CVEs1 on KEV0 new
RF9.8
R7000 Firmware
Netgear
140 CVEs1 on KEV0 new
RF9.8
R6900 Firmware
Netgear
132 CVEs1 on KEV0 new
RF9.8
R7500 Firmware
Netgear
126 CVEs1 on KEV0 new
WF9.8
Wndr4500 Firmware
Netgear
123 CVEs1 on KEV0 new
WF9.8
Wndr4300 Firmware
Netgear
122 CVEs1 on KEV0 new
RF9.8
R8000 Firmware
Netgear
118 CVEs1 on KEV0 new
RF9.8
R6400 Firmware
Netgear
113 CVEs1 on KEV0 new
RF9.8
R7900 Firmware
Netgear
101 CVEs1 on KEV0 new
DF9.8
D7000 Firmware
Netgear
92 CVEs1 on KEV0 new
WF9.8
Wnr2000 Firmware
Netgear
92 CVEs1 on KEV0 new
RF9.8
R6220 Firmware
Netgear
87 CVEs1 on KEV0 new
RF9.8
R6100 Firmware
Netgear
79 CVEs1 on KEV0 new
RF9.8
R7100lg Firmware
Netgear
76 CVEs1 on KEV0 new
DF9.8
D6100 Firmware
Netgear
68 CVEs1 on KEV0 new
RF9.8
R6250 Firmware
Netgear
60 CVEs1 on KEV0 new
RF9.8
R6300 Firmware
Netgear
55 CVEs1 on KEV0 new
WF9.8
Wnr2020 Firmware
Netgear
55 CVEs1 on KEV0 new
RF9.8
R7300dst Firmware
Netgear
50 CVEs1 on KEV0 new
DF9.8
Dgn2200 Firmware
Netgear
38 CVEs1 on KEV0 new
RF9.8
R7500v2 Firmware
Netgear
37 CVEs1 on KEV0 new
WF9.8
Wnr2050 Firmware
Netgear
31 CVEs1 on KEV0 new
JF9.8
Jgs516pe Firmware
Netgear
20 CVEs1 on KEV0 new
WF9.8
Wnr2000v5 Firmware
Netgear
14 CVEs1 on KEV0 new
WF9.8
Wnap320 Firmware
Netgear
11 CVEs1 on KEV0 new
WF9.8
Wnr614 Firmware
Netgear
11 CVEs1 on KEV0 new
WF9.8
Wndap350 Firmware
Netgear
10 CVEs1 on KEV0 new
WF9.8
Wndap360 Firmware
Netgear
10 CVEs1 on KEV0 new
WF9.8
Wn604 Firmware
Netgear
9 CVEs1 on KEV0 new
WF9.8
Wndap660 Firmware
Netgear
8 CVEs1 on KEV0 new
WF9.8
Wndr4700 Firmware
Netgear
7 CVEs1 on KEV0 new
RF8.8
R6200 Firmware
Netgear
5 CVEs1 on KEV0 new
AF8.8
Ac1450 Firmware
Netgear
4 CVEs1 on KEV0 new
JF9.8
Jnr1010v2 Firmware
Netgear
4 CVEs1 on KEV0 new
JF9.8
Jwnr2010v5 Firmware
Netgear
4 CVEs1 on KEV0 new
WF9.8
Wnr1000v4 Firmware
Netgear
4 CVEs1 on KEV0 new
WF9.8
Wnr2500 Firmware
Netgear
4 CVEs1 on KEV0 new
DF8.8
Dgn2200bv4 Firmware
Netgear
3 CVEs1 on KEV0 new
WF8.8
Wndr4000 Firmware
Netgear
3 CVEs1 on KEV0 new
WF8.6
Wnr1000v3 Firmware
Netgear
3 CVEs1 on KEV0 new
WF9.8
Wnr2000v4 Firmware
Netgear
3 CVEs1 on KEV0 new
WF9.8
Wnr2200 Firmware
Netgear
3 CVEs1 on KEV0 new
WF9.8
Wnr618 Firmware
Netgear
3 CVEs1 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-107918 | R7 R7300DST NETGEAR | 4.5 | Oct 13 | Insufficient input validation vulnerability in NETGEAR R7300 |
| CVE-2026-107917 | R7 R7300DST NETGEAR | 4.5 | Oct 13 | Insufficient input validation vulnerability in NETGEAR R7300 router |
| CVE-2026-11732 | RA RAX5 NETGEAR | 8.8 | Oct 13 | Insufficient input validation vulnerability exists in website blocking feature of certain NETGEAR RAX/CAX series models |
| CVE-2026-11731 | RA RAX28 NETGEAR | 8.8 | Oct 13 | Authentication Bypass Vulnerability in Certain NETGEAR RAX Series Models |
| CVE-2026-11730 | EX EX3700 NETGEAR | 5.4 | Oct 13 | Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models |
| CVE-2026-9218 | CB CBR40 NETGEAR | 4.5 | Oct 13 | Insufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized access |
| CVE-2026-9216 | RA RAX40 NETGEAR | 3.5 | Sep 8 | Insufficient input validation vulnerability exists in certain NETGEAR RAX Models |
| CVE-2026-9215 | XR XR500 NETGEAR | 6.7 | Sep 8 | A CSRF vulnerability exists in certain NETGEAR XR series devices |
| CVE-2026-9214 | R7 R7000 NETGEAR | 4.5 | Aug 11 | Insufficient input validation in NETGEAR R7000 router allows administrators to tamper with the device. |
| CVE-2026-11736 | RA RAX54Sv2 NETGEAR | 4.9 | Aug 11 | Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers |
| CVE-2026-11735 | RA RAX50S NETGEAR | 4.9 | Aug 11 | Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models |
| CVE-2026-11738 | RS RS700 NETGEAR | 4.4 | Aug 11 | Insufficient input validation in certain NETGEAR Nighthawk routers allows administrators to tamper with the device. |
| CVE-2026-11739 | MR MR60 NETGEAR | 6.4 | Aug 11 | Command injection vulnerability in some NETGEAR Nighthawk devices |
| CVE-2026-11734 | RA RAX43 NETGEAR | 2.7 | Aug 11 | Device administrator can interrupt the normal operation of some NETGEAR Nighthawk devices. |
| CVE-2026-11733 | RA RAX54S NETGEAR | 4.9 | Aug 11 | Buffer overflow vulnerability in some NETGEAR Nighthawk routers |
| CVE-2026-11737 | RA RAX20 NETGEAR | 4.5 | Aug 11 | Some NETGEAR Nighthawk devices allow administrators to tamper with the device |
| CVE-2026-11814 | RA RAX120v2 NETGEAR | 6.8 | Aug 11 | Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers |
| CVE-2026-62659 | WA WAX333 NETGEAR | 4.3 | Jul 14 | Authenticated users can make unauthorized changes on NETGEAR WAX333 Access Points |
| CVE-2026-15757 | DG DGND3700v1 NETGEAR | 6.3 | Jul 14 | Insufficient input validation vulnerability in NETGEAR DGND3700v1 modem router |
| CVE-2026-62656 | RA RAXE450 NETGEAR | 5.4 | Jul 14 | Post-authenticated command injection vulnerability found in certain NETGEAR RAX models |
| CVE-2026-62655 | RB RBE970 NETGEAR | 5.7 | Jul 14 | A DoS vulnerability due to stack overflow exists in certain NETGEAR Orbi models |
| CVE-2026-62657 | XR XR1000 NETGEAR | 4.9 | Jul 14 | Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models |
| CVE-2026-62658 | RA RAX43 NETGEAR | 4.7 | Jul 14 | Post-authentication Command Injection Vulnerability in certain Nighthawk RAX series models |
| CVE-2026-0420 | RA RAX35 NETGEAR | 5.9 | Jun 9 | Missing TLS certificate validation in NETGEAR's ReadyCloud client app |
| CVE-2026-9212 | RB RBR10 NETGEAR | 8.0 | Jun 9 | Insufficient authentication and input validation in certain NETGEAR products |
| CVE-2026-0411 | RB RBE970 NETGEAR | 8.0 | Jun 9 | A Sensitive Information Disclosure Vulnerability in NETGEAR Orbi Satellites |
| CVE-2026-0415 | RB RBR840 NETGEAR | 4.5 | Jun 9 | Insufficient input validation vulnerability in certain Orbi routers |
| CVE-2026-0414 | RB RBE970 NETGEAR | 4.5 | Jun 9 | Insufficient Input Validation Allows Unauthorized Modification of Router Software in certain NETGEAR Routers |
| CVE-2026-0413 | RB RBS850 NETGEAR | 4.5 | Jun 9 | Buffer overflow vulnerability in certain NETGEAR Nighthawk routers |
| CVE-2026-0418 | MS MS70 NETGEAR | 4.5 | Jun 9 | Certain NETGEAR devices allow administrators to tamper with system |
| CVE-2026-0417 | RA RAX50 NETGEAR | 4.5 | Jun 9 | Insufficient input validation in certain NETGEAR routers |
| CVE-2026-9210 | RA RAX50S NETGEAR | 4.5 | Jun 9 | Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router |
| CVE-2026-9211 | RA RAX30 NETGEAR | 8.8 | Jun 9 | Certain NETGEAR routers allow unauthenticated users to gain control of the router |
| CVE-2026-0416 | RA RAXE500 NETGEAR | 4.5 | Jun 9 | Improper input validation in certain NETGEAR routers allows unauthorized modification of protected router functionality |
| CVE-2026-3088 | RB RBSE960 NETGEAR | 6.5 | Jun 9 | Unauthenticated users can disrupt router operation |
| CVE-2026-9213 | XR XR1000 NETGEAR | 8.1 | Jun 9 | Insufficient input validation in certain NETGEAR routers |
| CVE-2026-0419 | JR JR6150 NETGEAR | 8.0 | Jun 9 | Insufficient input validation vulnerability in NETGEAR JR6150 |
| CVE-2026-0412 | JR JR6150 NETGEAR | 4.5 | Jun 9 | Insufficient input validation vulnerability in NETGEAR JR6150 Web UI |
| CVE-2026-0410 | RA RAX42v2 NETGEAR | 4.5 | Jun 9 | Insufficient input validation in certain NETGEAR routers |
| CVE-2026-0409 | O3 Orbi 370 NETGEAR | 6.4 | Jun 9 | Netgear Orbi 370 Series Remote Code Execution vulnerability |
| CVE-2022-40620 | RF Rax120 Firmware Netgear | 7.7 | Jan 28 | FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its… |
| CVE-2022-40619 | RF Rax120 Firmware Netgear | 7.7 | Jan 28 | FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices |
| CVE-2026-0408 | EF Ex3110 Firmware Netgear | 8.0 | Jan 13 | A path traversal vulnerability in NETGEAR WiFi range extenders allows an attacker with LAN authentication to access the router's IP and review the contents of the dynamically… |
| CVE-2026-0407 | EF Ex3110 Firmware Netgear | 8.0 | Jan 13 | An insufficient authentication vulnerability in NETGEAR WiFi range extenders allows a network adjacent attacker with WiFi authentication or a physical Ethernet port connection… |
| CVE-2026-0406 | XF Xr1000v2 Firmware Netgear | 8.0 | Jan 13 | An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injections |
| CVE-2026-0405 | RF Rbr860 Firmware Netgear | 7.8 | Jan 13 | An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin |
| CVE-2026-0404 | RF Rbs840 Firmware Netgear | 8.0 | Jan 13 | An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows network adjacent attackers authenticated over WiFi or on LAN to execute OS… |
| CVE-2026-0403 | RF Rbre960 Firmware Netgear | 8.0 | Jan 13 | An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections |
| CVE-2025-50526 | EF Ex8000 Firmware Netgear | 9.8 | Dec 23 | Netgear EX8000 V1.0.0.126 was discovered to contain a command injection vulnerability via the switch_status function |
| CVE-2025-45493 | EF Ex8000 Firmware Netgear | 6.5 | Dec 23 | Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the iface parameter in the action_bandwidth function |
| CVE-2025-12946 | RF Rax42v2 Firmware Netgear | 7.5 | Dec 9 | A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using… |
| CVE-2025-12945 | RF R7000p Firmware Netgear | 7.2 | Dec 9 | An improper input validation vulnerability in the NETGEAR Nighthawk R7000P (end of service) routers lets an authenticated administrator with local network access to the device, to… |
| CVE-2025-12941 | CF C6230 Firmware Netgear | 5.7 | Dec 9 | Denial of Service Vulnerability in NETGEAR C6220 and C6230 (DOCSIS® 3.0 Two-in-one Cable Modem + WiFi Router) allows authenticated local WiFi users reboot the router |
| CVE-2025-12944 | DF Dgn2200 Firmware Netgear | 8.8 | Nov 11 | Improper input validation in NETGEAR DGN2200v4 (N300 Wireless ADSL2+ Modem Router) allows attackers with direct network access to the device to potentially execute code on the… |
| CVE-2025-12943 | RF Rax30 Firmware Netgear | 7.5 | Nov 11 | Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band WiFi 6E Router)… |
| CVE-2025-12942 | RF R6850 Firmware Netgear | 7.5 | Nov 11 | Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over… |
| CVE-2025-12940 | WF Wax610 Firmware Netgear | 5.5 | Nov 11 | Login credentials are inadvertently recorded in logs if a Syslog Server is configured in NETGEAR WAX610 and WAX610Y (AX1800 Dual Band PoE Multi-Gig Insight Managed WiFi 6 Access… |
| CVE-2013-10061 | DF Dgn1000b Firmware Netgear | 7.2 | Aug 1 | An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN1000B model firmware versions 1.1.00.24 and 1.1.00.45) via the TimeToLive parameter… |
| CVE-2013-10060 | DF Dgn2200b Firmware Netgear | 7.2 | Aug 1 | An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN2200B model) firmware versions 1.0.0.36 and prior via the pppoe.cgi endpoint |
| CVE-2025-44652 | RF Rax30 Firmware Netgear | 7.5 | Jul 21 | In Netgear RAX30 V1.0.10.94_3, the USERLIMIT_GLOBAL option is set to 0 in multiple bftpd-related configuration files |
