Veille CVE

Recherche « NETGEAR R7000 »

8 CVE

  1. CVE-2026-9218 4.5 Moyenne

    NETGEAR CBR40 · NETGEAR R7000 · NETGEAR R7000P · NETGEAR RAX40

    Insufficient input validation vulnerability in time server (NTP) setting of the listed NETGEAR models allows an attacker who is connected to the router’s local network and has the router’s administrator credentials to run unauthorized commands on the router. This vulnerability could impact the integrity of the affected router. There is no impact on confidentiality or availability of the affected router.

  2. CVE-2026-9214 4.5 Moyenne

    NETGEAR R7000 · Netgear r7000 firmware

    Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.

  3. CVE-2026-11738 4.4 Moyenne

    NETGEAR R7000 · NETGEAR RAXE500 · NETGEAR RS700 · Netgear be9300 firmware

    Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.

  4. CVE-2026-11735 4.9 Moyenne

    NETGEAR R7000 · NETGEAR RAX20 · NETGEAR RAX35v2 · NETGEAR RAX41

    A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.

  5. CVE-2026-9210 4.5 Moyenne

    NETGEAR EX3700 · NETGEAR EX3800 · NETGEAR EX6120 · NETGEAR EX6130

    Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

  6. CVE-2026-0417 4.5 Moyenne

    NETGEAR MR60 · NETGEAR MR70 · NETGEAR MR80 · NETGEAR MS60

    Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity.

  7. CVE-2026-0410 4.5 Moyenne

    NETGEAR R7000 · NETGEAR RAX20 · NETGEAR RAX35v2 · NETGEAR RAX41

    Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.

  8. CVE-2016-6277 8.8 Élevée Exploitée

    Netgear d6220 firmware · Netgear d6400 firmware · Netgear r6250 firmware · Netgear r6400 firmware

    NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow remote attackers to execute arbitrary commands via shell metacharacters in the path info to cgi-bin/.