R6260 Firmware vulnerabilities

3 known vulnerabilities in R6260 Firmware from NETGEAR. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  Rbr20 Firmware: Improper Certificate Validation

  CVE-2022-40620Jan 28, 2026NETGEAR

  FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, does not properly validate TLS certificates when downloading update packages through its auto-update mechanism. An attacker (suitably positioned on the network) could interc

• 7.7 High severity

  Rbr20 Firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2022-40619Jan 28, 2026NETGEAREPSS 2.53%

  FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices. This interface is vulnerable to unauthenticated arbitrary command injection through the funjsq_access_toke

• 7.5 High severity

  Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows…

  CVE-2025-12942Nov 11, 2025NETGEAR

  Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform command execution.This issue affects R6260: through 1.1.0.8