NETGEAR vulnerabilities
We track 176 vulnerabilities in NETGEAR products across 60+ products. 176 are rated high or critical, and 8 have been exploited in real attacks. The most recent was published on November 10, 2026.
Latest NETGEAR vulnerabilities
- 8.8 High severity
ProSAFE Network Management System: Improper Neutralization of Special Elements used in an SQL Command
NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentica
- 8.8 High severity
ProSAFE Network Management System: Improper Neutralization of Special Elements used in an SQL Command
NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authenticati
- 8.8 High severity
wnr614_firmware: Weak Authentication
An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 allows attackers to bypass authentication and access the administrative interface via unspecified vectors.
- 8.8 High severity
ProSAFE Network Management System: Improper Limitation of a Pathname to a Restricted Directory
NETGEAR ProSAFE Network Management System UpLoadServlet Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authen
- 8.8 High severity
ProSAFE Network Management System: Unrestricted Upload of File with Dangerous Type
NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. A
- 7.8 High severity
ProSAFE Network Management System: Use of Default Credentials
NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. An attacker must fi
- 8.8 High severity
CAX30S: Improper Neutralization of Special Elements used in an OS Command
NETGEAR CAX30S SSO Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR CAX30S routers. Authentication is not required to exploit this vulnera
- 9.6 Critical severity
ProSAFE Network Management System: Improper Neutralization of Input During Web Page Generation
NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Minimal u
- 8.8 High severity
ProSAFE Network Management System: Improper Neutralization of Special Elements used in an SQL Command
NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System
- 8.8 High severity
ProSAFE Network Management System: Improper Neutralization of Special Elements used in an SQL Command
NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Authentication
- 8.8 High severity
CAX30: Out-of-bounds Write
NETGEAR CAX30 SSO Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR CAX30 routers. Authentication is not required to exploit this
- 8.8 High severity
Orbi 760: Missing Authentication for Critical Functionality
NETGEAR Orbi 760 SOAP API Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR Orbi 760 routers. Authentication is not required to exploit this vulnerability. Th
- 8.8 High severity
ProSAFE Network Management System: Improper Limitation of a Pathname to a Restricted Directory
NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although au
- 8.8 High severity
RAX30: Improper Neutralization of Special Elements used in an OS Command
NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this v
- 8.8 High severity
RAX30: Improper Neutralization of Special Elements used in an OS Command
NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerab
- 8.8 High severity
ProSAFE Network Management System: Missing Authorization
NETGEAR ProSAFE Network Management System createUser Missing Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Although au
- 8.8 High severity
ProSAFE Network Management System: Exposed Dangerous Method or Function
NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Manageme
- 8.8 High severity
ProSAFE Network Management System: Improper Neutralization of Special Elements used in an SQL Command
NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Although authe
- 8.8 High severity
ProSAFE Network Management System: Improper Neutralization of Special Elements used in an SQL Command
NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System
- 8.8 High severity
ProSAFE Network Management System: Unrestricted Upload of File with Dangerous Type
NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. A
- 8.8 High severity
ProSAFE Network Management System: Exposed Dangerous Method or Function
NETGEAR ProSAFE Network Management System BkreProcessThread Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management Sys
- 9.8 Critical severity
ProSAFE Network Management System: Improper Authentication
NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of NETGEAR ProSAFE Network Management System. Authentication is no
- 8.8 High severity
ProSAFE Network Management System: Unrestricted Upload of File with Dangerous Type
NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management S
- 8.8 High severity
RAX30: Improper Neutralization of Special Elements used in an OS Command
NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerab
- 8.8 High severity
Multiple Routers: Improper Certificate Validation
NETGEAR Multiple Routers curl_post Improper Certificate Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of multiple NETGEAR rou
- 8.8 High severity
RAX30: Out-of-bounds Write
NETGEAR RAX30 cmsCli_authenticate Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required
- 8.8 High severity
RAX30: Out-of-bounds Write
NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30. Authentication is not required to exploit thi
- 8.8 High severity
RAX30: Out-of-bounds Write
NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exp
- 8.0 High severity
RAX30: Improper Neutralization of Special Elements used in an OS Command
NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit th
- 8.0 High severity
RAX30: Out-of-bounds Write
NETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is required to
- 8.8 High severity
RAX30: Origin Validation Error
NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30. Authentication is not required to exploit this vulnerability
- 8.8 High severity
RAX30: Improper Neutralization of Special Elements used in an SQL Command
NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vuln
- 8.0 High severity
RAX30: Improper Neutralization of Special Elements used in an OS Command
NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this
- 7.5 High severity
R6850 Firmware: Exposure of Sensitive Information to an Unauthorized Actor
An information leak in the BRS_top.html component of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required.
- 7.5 High severity
r6850_firmware: Exposure of Sensitive Information to an Unauthorized Actor
An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required.
- 8.8 High severity
dgnd4000_firmware: Improper Privilege Management
An issue in NETGEAR-DGND4000 v.1.1.00.15_1.00.15 allows a remote attacker to escalate privileges via the next_file parameter to the /setup.cgi component.
- 7.5 High severity
cbr40_firmware: Exposure of Sensitive Information to an Unauthorized Actor
An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required.
- 8.8 High severity
RAX30: Out-of-bounds Write
A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A specially crafted HTTP request can lead to code execution. An attacker can make an authenticated HTTP request to
- 9.8 Critical severity
Wnr2000 Firmware: Improper Neutralization of Special Elements used in a Command
A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication.
- 7.8 High severity
NETGEAR ProSAFE Network Management System: Improper Access Control
A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory. The user can then execute the JSP files under the security context of SYST