NETGEAR vulnerabilities
We track 176 vulnerabilities in NETGEAR products across 60+ products. 176 are rated high or critical, and 8 have been exploited in real attacks. The most recent was published on November 10, 2026.
Latest NETGEAR vulnerabilities
- 7.5 High severity
Wpn824ext Firmware: Improper Validation of Integrity Check Value
An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the CRC check. A successful attack can either introduce
- 8.8 High severity
R6200: Improper Neutralization of Special Elements used in an OS Command
Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/acos_service that could allow remote authenticated attackers the ability to modify values in the vulnerable parameter.
- 8.8 High severity
R6200 Firmware: Improper Neutralization of Special Elements used in an OS Command
NETGEAR R6200_V2 firmware versions through R6200v2-V1.0.3.12_10.1.11 and R6300_V2 firmware versions through R6300v2-V1.0.4.52_10.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharacters in the ipv6_fix.cgi ipv6_wan_ipaddr
- 9.8 Critical severity
Ssl312 Firmware: Improper Neutralization of Special Elements used in an SQL Command
NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi.
- 8.8 High severity
R8500 Firmware: Improper Neutralization of Special Elements used in an OS Command
NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the ipv6_fix.cgi ipv6_wan_ipaddr, ipv6_lan_ipaddr, ipv6_wan_length, or ipv6_lan_length parameter.
- 8.8 High severity
R8500 Firmware: Improper Neutralization of Special Elements used in an OS Command
NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to admin_account.cgi.
- 8.8 High severity
R8500 Firmware: Improper Neutralization of Special Elements used in an OS Command
NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to password.cgi.
- 7.8 High severity
Ex6100 Firmware: Out-of-bounds Write
A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80 2.1.2.6, and DC112A 1.0.0.62, which may lead to the execution of arbitrary code without authentication.
- 9.8 Critical severity
Netgear JGS516PE Devices Missing Function Level Access Control Exploited
NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.
- 9.8 Critical severity
NETGEAR Multiple Devices Buffer Overflow Exploited
NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. The NETGEAR ID i
- 9.8 Critical severity
NETGEAR Multiple WAP Devices Command Injection Exploited
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbi
- 8.8 High severity
NETGEAR DGN2200 Devices OS Command Injection Exploited
dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the host_name field of an HTTP POST request, a different vulnerability than CVE-2017-6077.
- 9.8 Critical severity
NETGEAR DGN2200 Remote Code Execution Exploited
ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping_IPAddr field of an HTTP POST request.
- 9.8 Critical severity
NETGEAR WNR2000v5 Router Buffer Overflow Exploited
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.
- 8.1 High severity
NETGEAR Multiple Devices Exposure of Sensitive Information Exploited
An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices. They are prone to password disclosure via simple crafted requests to the web management server. The bug is e
- 8.8 High severity
NETGEAR Multiple Routers Remote Code Execution Exploited
NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000