CVEs (6)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Netgear 3Xr1000 Firmware Xr1000v2 FirmwareXr500 FirmwareOct 13, 2026 Sep 8, 2026 1.8 LOW· v4 6.7 MEDIUM· v3 N/A· v2 A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt r...Show more |
1Netgear 27Mr60 Firmware Mr70 FirmwareMr90 Firmware+24 moreSep 9, 2026 Aug 11, 2026 4.9 MEDIUM· v4 6.4 MEDIUM· v3 N/A· v2 A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise...Show more |
1Netgear 19Rax20 Firmware Rax35v2 FirmwareRax41 Firmware+16 moreSep 9, 2026 Aug 11, 2026 1.9 LOW· v4 4.9 MEDIUM· v3 N/A· v2 A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality. |
1Netgear 20R7000 Firmware Rax20 FirmwareRax35v2 Firmware+17 moreSep 9, 2026 Aug 11, 2026 1.9 LOW· v4 4.9 MEDIUM· v3 N/A· v2 A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality. |
1Netgear 19R7000 Firmware Rax20 FirmwareRax35v2 Firmware+16 moreJun 18, 2026 Jun 9, 2026 1.9 LOW· v4 4.5 MEDIUM· v3 N/A· v2 Authenticated administrators connected to the local network can gain
elevated access to the router and make unauthorized changes to router
software and functionality. |
An insufficient input validation vulnerability in the NETGEAR XR1000v2
allows attackers connected to the router's LAN to execute OS command
injections. |