Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 10

Export CSV
CVE-2026-11739

Command injection vulnerability in some NETGEAR Nighthawk devices

A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.

CVSS 4.0 · 4.9 Medium EPSS 2.5% KEV · Not listed
Vendors
Netgear
Products
Mr60 Mr60 Firmware Mr70 and 51 more
CVE-2026-11737

Some NETGEAR Nighthawk devices allow administrators to tamper with the device

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality.

CVSS 4.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Rax20 Rax20 Firmware Rax41 and 23 more
CVE-2026-11733

Buffer overflow vulnerability in some NETGEAR Nighthawk routers

A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.

CVSS 4.0 · 1.1 Low EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Rax41 Rax41 Firmware Rax41v2 and 19 more
CVE-2026-11734

Device administrator can interrupt the normal operation of some NETGEAR Nighthawk devices.

A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.

CVSS 4.0 · 1.1 Low EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Mr70 Mr70 Firmware Mr90 and 27 more
CVE-2026-11736

Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers

A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality.

CVSS 4.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Rax20 Rax20 Firmware Rax35v2 and 35 more
CVE-2026-11735

Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models

A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.

CVSS 4.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
R7000 R7000 Firmware Rax20 and 37 more
CVE-2026-9210

Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

CVSS 4.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Ex3700 Ex3700 Firmware Ex3800 and 59 more
CVE-2026-0417

Insufficient input validation in certain NETGEAR routers

Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity.

CVSS 4.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Mr60 Mr60 Firmware Mr70 and 51 more
CVE-2026-0410

Insufficient input validation in certain NETGEAR routers

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.

CVSS 4.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
R7000 R7000 Firmware Rax20 and 35 more
CVE-2025-12946

Improper input validation in NETGEAR Nighthawk routers

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques (MiTM) to manipulate DNS responses and execute commands when speedtests are run. This issue affects RS700: through 1.0.7.82; RAX54Sv2 : before V1.1.6.36; RAX41v2: before V1.1.6.36; RAX50: before V1.2.14.114; RAXE500: before V1.2.14.114; RAX41: before V1.0.17.142; RAX43: before V1.0.17.142; RAX35v2: before V1.0.17.142; RAXE450: before V1.2.14.114; RAX43v2: before V1.1.6.36; RAX42: before V1.0.17.142; RAX45: before V1.0.17.142; RAX50v2: before V1.1.6.36; MR90: before V1.0.2.46; MS90: before V1.0.2.46; RAX42v2: before V1.1.6.36; RAX49S: before V1.1.6.36.

CVSS 4.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Mr90 Mr90 Firmware Ms90 and 33 more