Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2026-9215

A CSRF vulnerability exists in certain NETGEAR XR series devices

A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.

CVSS 4.0 · 1.8 Low EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Xr1000 Xr1000 Firmware Xr1000v2 and 3 more
CVE-2026-11739

Command injection vulnerability in some NETGEAR Nighthawk devices

A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.

CVSS 4.0 · 4.9 Medium EPSS 2.5% KEV · Not listed
Vendors
Netgear
Products
Mr60 Mr60 Firmware Mr70 and 51 more
CVE-2026-11736

Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers

A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality.

CVSS 4.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Rax20 Rax20 Firmware Rax35v2 and 35 more
CVE-2026-11735

Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models

A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.

CVSS 4.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
R7000 R7000 Firmware Rax20 and 37 more
CVE-2026-0410

Insufficient input validation in certain NETGEAR routers

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.

CVSS 4.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
R7000 R7000 Firmware Rax20 and 35 more
CVE-2026-0406

Insufficient input validation in NETGEAR Nighthawk router XR1000v2

An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injections.

CVSS 4.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Xr1000v2 Xr1000v2 Firmware