CVE-2020-26913

CVE-2020-26913 affects NETGEAR routers and Wi‑Fi systems (example devices include D6100, R7800, R8900, R9000, RBK/RBR/RBS series, SRK/SRR/SRS, WN models, XR models) with a stack-based buffer overflow exploitable by an authenticated user. Affected firmware versions are listed per device (e.g., D61...

CVE-2020-26913

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.63, R7800 before 1.0.2.60, R8900 before 1.0.4.26, R9000 before 1.0.4.26, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before 2.3.0.28, RBK50 before 2.3.0.32, RBR5...

CVE-2020-26914

CVE-2020-26914 affects multiple NETGEAR devices (D6200, D7000, JR6150, R6020, R6050, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, WNR2020) with specific firmware versions listed. The issue is a command injection vulnerability exploitable by an authenticated user, enabling potential...

CVE-2020-26914

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR6150 before 1.0.1.24, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before 1.1.0.100, R6260 before...

CVE-2020-26915

The CVE-2020-26915 entry describes a stored Cross-Site Scripting vulnerability affecting multiple NETGEAR devices. Affected models and older firmware versions include D7800 < 1.0.1.56, R7500v2 < 1.0.3.46, R7800 < 1.0.2.68, R8900 < 1.0.4.28, R9000 < 1.0.4.28, RAX120 < 1.0.0.78, R...

CVE-2020-26915

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, XR500 before 2.3.2.56,...

CVE-2020-26916

CVE-2020-26916 concerns NETGEAR router devices affected by incorrect security settings configuration. The connected data lists affected models and firmware ranges, for example: D6200 (< 1.1.00.38), D7000 (< 1.0.1.78), JR6150 (< 1.0.1.24), R6020 (< 1.0.0.42), R6050 (< 1.0.1.24), R60...

CVE-2020-26916

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR6150 before 1.0.1.24, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before 1.1.0.100, R6260 befor...

CVE-2020-26917

Certain NETGEAR devices are affected by stored XSS. This affects EX7000 before 1.0.1.78, R6250 before 1.0.4.34, R6400 before 1.0.1.46, R6400v2 before 1.0.2.66, R7100LG before 1.0.0.50, R7300DST before 1.0.0.70, R7900 before 1.0.3.8, R8300 before 1.0.2.128, and R8500 before 1.0.2.128...

CVE-2020-26917

The CVE-2020-26917 entry concerns NETGEAR devices vulnerable to stored XSS. Affected models and firmware ranges are: EX7000 < 1.0.1.78, R6250 < 1.0.4.34, R6400 < 1.0.1.46, R6400v2 < 1.0.2.66, R7100LG < 1.0.0.50, R7300DST < 1.0.0.70, R7900 < 1.0.3.8, R8300 < 1.0.2.128, and ...

CVE-2020-26918

CVE-2020-26918 affects NETGEAR devices (EX7000 <= 1.0.1.78; R6250 <= 1.0.4.34; R6400 <= 1.0.1.46; R6400v2 <= 1.0.2.66; R6700v3 <= 1.0.2.66; R7100LG <= 1.0.0.50; R7300DST <= 1.0.0.70; R7900 <= 1.0.3.8; R8300 <= 1.0.2.128; R8500

CVE-2020-26918

Certain NETGEAR devices are affected by stored XSS. This affects EX7000 before 1.0.1.78, R6250 before 1.0.4.34, R6400 before 1.0.1.46, R6400v2 before 1.0.2.66, R6700v3 before 1.0.2.66, R7100LG before 1.0.0.50, R7300DST before 1.0.0.70, R7900 before 1.0.3.8, R8300 before 1.0.2.128, and R8500 befor...

CVE-2020-26919

NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level...

CVE-2020-26919

NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level...

CVE-2020-26919

CVE-2020-26919 affects NETGEAR JGS516PE devices prior to 2.6.0.43, with a lack of function-level access control. Connected documents also describe unauthenticated remote code execution in NETGEAR ProSAFE Plus (pre-2.6.0.43) via public login pages and POST endpoints exposing debug actions (submitI...

CVE-2020-26920

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5.3.110, SRR60 before 2.5.3.110, and SRS60 before 2.5.3.110...

CVE-2020-26920

The CVE-2020-26920 entry affects NETGEAR SRK60, SRR60, and SRS60 devices with firmware versions prior to 2.5.3.110. The vulnerability is a command injection allowing an unauthenticated attacker to execute commands on the device. CID: affected components are the router-family products listed above...

CVE-2020-26921

CVE-2020-26921 affects several NETGEAR Smart Managed Plus devices: GS110EMX (firmware < 1.0.1.7), GS810EMX (< 1.7.1.3), XS512EM (< 1.0.1.3), XS724EM (

CVE-2020-26921

Certain NETGEAR devices are affected by authentication bypass. This affects GS110EMX before 1.0.1.7, GS810EMX before 1.7.1.3, XS512EM before 1.0.1.3, and XS724EM before 1.0.1.3...

CVE-2020-26922

CVE-2020-26922 affects NETGEAR wireless controllers WC7500, WC7600, WC7600v2, and WC9500 up to firmware 6.5.5.24. The vulnerability is a post-authentication command injection (local access) allowing an attacker with authenticated access to execute arbitrary commands, with impact on confidentialit...