Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2026-11814

Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.

CVSS 4.0 · 4.9 Medium EPSS 2.2% KEV · Not listed
Vendors
Netgear
Products
Be9300 Be9300 Firmware Mr60 and 49 more
CVE-2026-11738

Insufficient input validation in certain NETGEAR Nighthawk routers allows administrators to tamper with the device.

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.

CVSS 4.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Be9300 Be9300 Firmware Mr60 and 52 more
CVE-2026-11739

Command injection vulnerability in some NETGEAR Nighthawk devices

A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.

CVSS 4.0 · 4.9 Medium EPSS 2.5% KEV · Not listed
Vendors
Netgear
Products
Mr60 Mr60 Firmware Mr70 and 51 more
CVE-2026-0418

Certain NETGEAR devices allow administrators to tamper with system

Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.

CVSS 4.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Cbr750 Cbr750 Firmware Ex6120 and 67 more
CVE-2025-12946

Improper input validation in NETGEAR Nighthawk routers

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques (MiTM) to manipulate DNS responses and execute commands when speedtests are run. This issue affects RS700: through 1.0.7.82; RAX54Sv2 : before V1.1.6.36; RAX41v2: before V1.1.6.36; RAX50: before V1.2.14.114; RAXE500: before V1.2.14.114; RAX41: before V1.0.17.142; RAX43: before V1.0.17.142; RAX35v2: before V1.0.17.142; RAXE450: before V1.2.14.114; RAX43v2: before V1.1.6.36; RAX42: before V1.0.17.142; RAX45: before V1.0.17.142; RAX50v2: before V1.1.6.36; MR90: before V1.0.2.46; MS90: before V1.0.2.46; RAX42v2: before V1.1.6.36; RAX49S: before V1.1.6.36.

CVSS 4.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Mr90 Mr90 Firmware Ms90 and 33 more