3193 matches found
CVE-2026-0416
An insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated administrator with local network access to submit crafted input that bypasses intended management interface restrictions, resulting in unauthorized modification of protected router...
CVE-2026-48860
Reliance on IP Address for Authentication vulnerability in Erlang/OTP ssl inettlsdist module allows unauthenticated bypass of the distribution-over-TLS LAN allowlist. The inettlsdist:checkip/1 function, which enforces a LAN allowlist for Erlang distribution over TLS, calls inet:sockname/1 instead...
CVE-2026-53476 Assisted-migration-agent: vddk tarball chained-symlink arbitrary file write
A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network LAN, can exploit a path traversal vulnerability. By crafting a specially designed gzipped tarball, the attacker can bypass security checks and write arbitrary files to the system. Thi...
EUVD-2026-36033
A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network LAN, can exploit a path traversal vulnerability. By crafting a specially designed gzipped tarball, the attacker can bypass security checks and write arbitrary files to the system. Thi...
EUVD-2026-35466
Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting product's confidentiality or change certain configurations...
EUVD-2026-35458
An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation...
EUVD-2026-35456
Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests...
EUVD-2026-35461
Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system...
EUVD-2026-35452
Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality...
EUVD-2026-35457
Authenticated administrators connected to the local network can modify router functionality beyond what is intended through the standard management interface...
EUVD-2026-35460
Insufficient input validation vulnerability in NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity...
EUVD-2026-35463
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality...
EUVD-2026-35462
Insufficient input validation of buffers vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality...
CVE-2026-9211
An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation...
CVE-2026-9212
Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations...
CVE-2026-3088
Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests...
CVE-2026-0418
Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system...
CVE-2026-0416
An insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated administrator with local network access to submit crafted input that bypasses intended management interface restrictions, resulting in unauthorized modification of protected router...