CVE-2021-34982

The CVE-2021-34982 entry describes a pre-auth, remote code execution vulnerability in the httpd service of NETGEAR routers. The flaw is a stack-based buffer overflow caused by unchecked length of user-supplied data in the strings file, leading to code execution with root privileges when a network...

CVE-2022-27642

Summary (CVE-2022-27642) : Affects NETGEAR R6700v3 router with firmware 1.0.4.120_10.0.91. The vulnerability is in the httpd service and stems from incorrect string matching logic when accessing protected pages, allowing network-adjacent attackers to bypass authentication. In combination with oth...

CVE-2021-34983

NETGEAR multiple routers are affected by a pre-authentication httpd limitation that allows network-adjacent attackers to disclose sensitive information and potentially stored credentials. Root cause: lack of authentication before access to system configuration via the httpd service (port 80). The...

CVE-2021-45613

CVE-2021-45613 affects a broad set of NETGEAR routers (e.g., CBR40 <2.5.0.24, CBR750 <4.6.3.6, D7000v2 <1.0.0.74, LAX20 <1.1.6.28, MK62 <1.0.6.116, MR60 <1.0.6.116, MS60 <1.0.6.116, MR80 <1.1.2.20, MS80 <1.1.2.20, RAX15/20/200/45/50/43/40v2/35v2/75/80 < respective 1....

CVE-2021-45620

The CVE-2021-45620 entry describes an unauthenticated command-injection vulnerability affecting a broad set of NETGEAR devices. Affected models and firmware ranges include CBR40 (<2.5.0.24), CBR750 (<4.6.3.6), EAX20 (<1.0.0.58), EAX80 (<1.0.1.68), LAX20 (<1.1.6.28), MR60 (<1.0.6...

CVE-2022-27647

CWE: Command injection in NETGEAR R6700v3 router (CVE-2022-27647). The flaw resides in libreadycloud.so handling of user-supplied name/email, enabling root code execution via system calls after bypassing authentication. Documented by ZDI-22-524 (RCE via remote attacker with ADJACENT access) and m...

CVE-2026-0418

CVE-2026-0418 concerns NETGEAR devices where insufficient configuration management allows authenticated administrators on the local network to tamper with the system. The available description notes this is related to local-authenticated access and tampering capability, with a CVSS 4.0 base score...

CVE-2026-0417

The CVE affects NETGEAR devices where the vulnerability arises from insufficient input validation in certain routers. The root cause is input validation issues that allow authenticated administrators connected to the local network to tamper with the router’s integrity. Reported impact centers on ...

CVE-2026-9210

CVE-2026-9210 involves an insufficient input validation vulnerability in NETGEAR routers where listed NETGEAR models allow authenticated administrators on the local network to make unauthorized modifications to router software and functionality. The underlying issue is improper input handling tha...