12226 matches found
CVE-2026-0403
The CVE-2026-0403 entry concerns NETGEAR Orbi routers with an insufficient input validation vulnerability that enables OS command injections when an attacker is connected to the LAN. Affected component is the router software; the root cause is input validation weakness. Documented impact indicate...
PT-2026-2631
A path traversal vulnerability in NETGEAR WiFi range extenders allows an attacker with LAN authentication to access the router's IP and review the contents of the dynamically generated webproc file, which records the username and password submitted to the router GUI...
PT-2026-2626
CVE-2026-0403 An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections. https://t.co/RZjGc6Wp0E...
PT-2026-2628
Name of the Vulnerable Software and Affected Versions NETGEAR Orbi affected versions not specified Description A flaw exists that allows users on the local network to gain administrative access to the router web interface without proper authentication. This bypass enables unauthorized access to...
NETGEAR Orbi 安全漏洞
NETGEAR Orbi is a distributed WiFi system from NETGEAR. A security vulnerability exists in NETGEAR Orbi that stems from an authentication bypass that could cause a local network user to access the router web interface as an administrator...
NETGEAR WiFi range extenders 安全漏洞
NETGEAR WiFi range extenders are a series of WiFi signal extenders from NETGEAR. A security vulnerability exists in NETGEAR WiFi range extenders that stems from insufficient authentication, which could lead to a network-adjacent attacker bypassing authentication and accessing the management panel...
NETGEAR WiFi range extenders 安全漏洞
NETGEAR WiFi range extenders are a series of WiFi signal extenders from NETGEAR. A security vulnerability exists in NETGEAR WiFi range extenders that stems from path traversal and could allow an attacker to access and view the contents of a webproc file containing a username and password...
PT-2026-2627
An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows network adjacent attackers authenticated over WiFi or on LAN to execute OS command injections on the router. DHCPv6 is not enabled by default...
NETGEAR Orbi 安全漏洞
NETGEAR Orbi is a distributed WiFi system from NETGEAR. A security vulnerability exists in the NETGEAR Orbi that stems from insufficient input validation of the DHCPv6 feature, which could lead to OS command injection...
PT-2026-2630
An insufficient authentication vulnerability in NETGEAR WiFi range extenders allows a network adjacent attacker with WiFi authentication or a physical Ethernet port connection to bypass the authentication process and access the admin panel...
NETGEAR XR1000v2 安全漏洞
The NETGEAR XR1000v2 is a wireless router from NETGEAR. A security vulnerability exists in the NETGEAR XR1000v2 that stems from insufficient input validation and could lead to OS command injection...
PT-2026-2629
CVE-2026-0406 An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injections. https://t.co/Wc5Mb3XINq...
NETGEAR Orbi 安全漏洞
NETGEAR Orbi is a distributed WiFi system from NETGEAR. A security vulnerability exists in NETGEAR Orbi that stems from insufficient input validation and could lead to OS command injection...
CVE-2023-50089
A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...
CVE-2023-49007
In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd...
CVE-2021-41449
A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive restricted information, such as forbidden files of the web application, via sending a specially crafted HTTP packet...
CVE-2021-31802
NETGEAR R7000 1.0.11.116 devices have a heap-based Buffer Overflow that is exploitable from the local network without authentication. The vulnerability exists within the handling of an HTTP request. An attacker can leverage this to execute code as root. The problem is that a user-provided length...
CVE-2016-10864
NETGEAR EX7000 V1.0.0.421.0.94 devices allow XSS via the SSID...
CVE-2022-38956
An exploitable firmware downgrade vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. An attacker can conduct a MITM attack to replace the user-uploaded firmware image with an original old firmware image. This affects Firmware 1.1.11.1.9 and earlier...