CVE-2022-40619

🗓️ 28 Jan 2026 19:16:18Reported by [email protected]Type

Unauthenticated command injection via the funjsq_access_token on the LAN HTTP server in affected Netgear routers and Orbi systems.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-40619	28 Jan 202600:00	–	attackerkb
Circl	CVE-2022-40619	19 Sep 202215:49	–	circl
CNNVD	NETGEAR’s various products have security vulnerabilities	28 Jan 202600:00	–	cnnvd
CVE	CVE-2022-40619	28 Jan 202600:00	–	cve
Cvelist	CVE-2022-40619	28 Jan 202600:00	–	cvelist
OSV	CVE-2022-40619	28 Jan 202619:16	–	osv
Positive Technologies	PT-2022-25420	19 Sep 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-40619	29 Jan 202603:26	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2022-40619	26 Jan 202600:00	–	vulncheck_kev
Vulnrichment	CVE-2022-40619	28 Jan 202600:00	–	vulnrichment

NVD

Node

AND

netgear rbr20_firmwareRange<2.7.2.26

netgear rbr20Match-

Node

AND

netgear r6230_firmwareRange<1.1.0.112

netgear r6230Match-

Node

AND

netgear r6260_firmwareRange<1.1.0.88

netgear r6260Match-

Node

AND

netgear r7000_firmwareRange<1.0.11.134

netgear r7000Match-

Node

AND

netgear r8900_firmwareRange<1.0.5.42

netgear r8900Match-

Node

AND

netgear r9000_firmwareRange<1.0.5.42

netgear r9000Match-

Node

AND

netgear rax120_firmwareRange<1.2.8.40

netgear rax120Match-

Node

AND

netgear rax120v2_firmwareRange<1.2.8.40

netgear rax120v2Match-

Node

AND

netgear xr300_firmwareRange<1.0.3.72

netgear xr300Match-

Node

AND

netgear rbs20_firmwareRange<2.7.2.26

netgear rbs20Match-

Source	Link
kb	www.kb.netgear.com/000065132/Security-Advisory-for-Vulnerabilities-in-FunJSQ-on-Some-Routers-and-Orbi-WiFi-Systems-PSV-2022-0117
onekey	www.onekey.com/resource/security-advisory-netgear-routers-funjsq-vulnerabilities

17 Jun 2026 05:01Current

CVSS 3.17.7

EPSS0.02233

CWE-77