CVE-2025-50526

The Netgear EX8000 (version V1.0.0.126 ) is susceptible to a command injection vulnerability within the switch_status function. This flaw allows for potential unauthorized command execution . To remediate this issue, users should update to a newer version containing a fix. As a temporary workarou...

CVE-2025-45493: Improper Neutralization of Special Elements used in a Command

Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the iface parameter in the actionbandwidth function...

NETGEAR EX8000 安全漏洞

NETGEAR EX8000 is a wireless network signal extender from NETGEAR. A security vulnerability exists in NETGEAR EX8000 version V1.0.0.126, which originates from a command injection in the iface parameter of the actionbandwidth function...

PT-2025-52767

Name of the Vulnerable Software and Affected Versions Netgear EX8000 version 1.0.0.126 Description The Netgear EX8000 version 1.0.0.126 contains a command injection issue. This occurs through the switch status function. The vulnerability allows for potential unauthorized command execution...

NETGEAR EX8000 安全漏洞

NETGEAR EX8000 is a wireless network signal extender from NETGEAR. A security vulnerability exists in NETGEAR EX8000 version V1.0.0.126, which originates from a command injection in the switchstatus function...

PT-2025-52766

Name of the Vulnerable Software and Affected Versions Netgear EX8000 version 1.0.0.126 Description The Netgear EX8000 Mesh Extender firmware version 1.0.0.126 contains a Command Injection issue. This occurs due to a flaw in the action bandwidth function, specifically through manipulation of the...

CVE-2025-50526: Improper Neutralization of Special Elements used in a Command

Netgear EX8000 V1.0.0.126 was discovered to contain a command injection vulnerability via the switchstatus function...

The vulnerability of NETGEAR R6260 and R6850 Wi-Fi router microprogramming software, related to insufficient input data verification, allows attackers to execute arbitrary commands.

The vulnerability of NETGEAR R6260 and R6850 Wi-Fi router microprogramming systems is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

The vulnerability of NETGEAR RAX30 and RAXE300 microprogrammed software drivers lies in authentication process errors, allowing attackers to execute arbitrary commands.

The vulnerability of NETGEAR RAX30 and RAXE300 microprogrammed software drivers is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to execute arbitrary commands remotely...

VulnCheck KEV: CVE-2020-27866

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Authentication is not required to exploit this...

CVE-2025-12941

Denial of Service Vulnerability in NETGEAR C6220 and C6230 DOCSIS® 3.0 Two-in-one Cable Modem + WiFi Router allows authenticated local WiFi users reboot the router...

CVE-2025-12946

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques MiTM to manipulate DNS responses and execute commands when speedtests are run. This issue...

CVE-2025-12945

A vulnerability in NETGEAR Nighthawk R7000P routers lets an authenticated admin execute OS command injections due to improper input validation. This issue affects R7000P: through 1.3.3.154...

EUVD-2025-202283

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques MiTM to manipulate DNS responses and execute commands when speedtests are run. This issue...

EUVD-2025-202285

Denial of Service Vulnerability in NETGEAR C6220 and C6230 DOCSIS® 3.0 Two-in-one Cable Modem + WiFi Router allows authenticated local WiFi users reboot the router...

CVE-2025-12941

Denial of Service Vulnerability in NETGEAR C6220 and C6230 DOCSIS® 3.0 Two-in-one Cable Modem + WiFi Router allows authenticated local WiFi users reboot the router...

CVE-2025-12945

An improper input validation vulnerability in the NETGEAR Nighthawk R7000P end of service routers lets an authenticated administrator with local network access to the device, to execute OS command injections and make unauthorized modifications to the router software and functionality impacting it...

CVE-2025-12946

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques MiTM to manipulate DNS responses and execute commands when speedtests are run. This issue...

CVE-2025-12945

A vulnerability in NETGEAR Nighthawk R7000P routers lets an authenticated admin execute OS command injections due to improper input validation. This issue affects R7000P: through 1.3.3.154...

CVE-2025-12946

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques MiTM to manipulate DNS responses and execute commands when speedtests are run. This issue...