netgear

1,325 tracked vulnerabilities.

CVE-2025-29044 CRITICAL
Netgear R6100 Firmware V1.0.1.28 - Buffer Overflow via QUERY_STRING
Apr 17, 2025
CVSS 9.8
EPSS 0.03
CVE-2025-28219 CRITICAL
Netgear DC112A V1.0.0.64 - OS Command Injection via usb_adv.cgi deviceName Parameter
Mar 28, 2025
CVSS 9.8
EPSS 0.12
CVE-2025-25246 HIGH
NETGEAR XR1000 and XR500 Routers - Unauthenticated Remote Code Execution
Feb 05, 2025
CVSS 8.1
EPSS 0.05
CVE-2024-57235 CRITICAL
NETGEAR RAX50 Firmware V1.0.2.26 - OS Command Injection via iface Parameter in vif_enable Function
May 05, 2025
CVSS 9.8
EPSS 0.08
CVE-2024-57234 CRITICAL
NETGEAR RAX5 Firmware V1.0.2.26 - OS Command Injection via apcli_cancel_wps ifname Parameter
May 05, 2025
CVSS 9.8
EPSS 0.08
CVE-2024-57233 CRITICAL
NETGEAR RAX5 Firmware 1.0.2.26 - OS Command Injection via iface Parameter in vif_disable Function
May 05, 2025
CVSS 9.8
EPSS 0.08
CVE-2024-57232 CRITICAL
NETGEAR RAX5 Firmware V1.0.2.26 - OS Command Injection via apcli_wps_gen_pincode ifname Parameter
May 05, 2025
CVSS 9.8
EPSS 0.08
CVE-2024-57231 CRITICAL
NETGEAR RAX5 Firmware V1.0.2.26 - OS Command Injection via apcli_do_enr_pbc_wps ifname Parameter
May 05, 2025
CVSS 9.8
EPSS 0.08
CVE-2024-57230 CRITICAL
NETGEAR RAX5 Firmware 1.0.2.26 - OS Command Injection via apcli_do_enr_pin_wps ifname Parameter
May 05, 2025
CVSS 9.8
EPSS 0.08
CVE-2024-57229 CRITICAL
NETGEAR RAX5 Firmware V1.0.2.26 - OS Command Injection via reset_wifi devname Parameter
May 05, 2025
CVSS 9.8
EPSS 0.08
CVE-2024-54809 CRITICAL
Netgear WNR854T Firmware 1.5.2 - Stack-based Buffer Overflow via parse_st_header Function
Mar 31, 2025
CVSS 9.8
EPSS 0.00
CVE-2024-54808 CRITICAL
Netgear WNR854T 1.5.2 - Stack-based Buffer Overflow in SetDefaultConnectionService
Mar 31, 2025
CVSS 9.8
EPSS 0.01
CVE-2024-54807 CRITICAL
Netgear WNR854T 1.5.2 - OS Command Injection via AddPortMapping NewInternalClient Parameter
Mar 31, 2025
CVSS 9.8
EPSS 0.02
CVE-2024-54806 CRITICAL
Netgear WNR854T 1.5.2 - OS Command Injection via cmd.cgi
Mar 31, 2025
CVSS 9.8
EPSS 0.01
CVE-2024-54805 CRITICAL
Netgear WNR854T 1.5.2 - OS Command Injection via nvram get_email Parameter
Mar 31, 2025
CVSS 9.8
EPSS 0.02
CVE-2024-54804 CRITICAL
Netgear WNR854T 1.5.2 - OS Command Injection via wan_hostname Parameter
Mar 31, 2025
CVSS 9.8
EPSS 0.04
CVE-2024-54803 CRITICAL
Netgear WNR854T 1.5.2 - OS Command Injection via pppoe_peer_mac Parameter
Mar 31, 2025
CVSS 9.8
EPSS 0.04
CVE-2024-54802 CRITICAL
Netgear WNR854T 1.5.2 - Stack-Based Buffer Overflow via UPNP M-SEARCH Host Header
Mar 31, 2025
CVSS 9.8
EPSS 0.01
CVE-2024-57046 HIGH NUCLEI
Netgear DGN2200 <v1.0.0.46 - Auth Bypass
Feb 18, 2025
CVSS 8.8
EPSS 0.50
CVE-2024-23690 HIGH
Netgear FVS336Gv2-3 - Command Injection
Feb 04, 2025
CVSS 7.2
EPSS 0.01
CVE-2024-12847 CRITICAL
NETGEAR DGN1000 < 1.1.00.48 - Unauthenticated OS Command Injection via setup.cgi
Jan 10, 2025
CVSS 9.8
EPSS 0.73
CVE-2024-12988 HIGH
Netgear R6900P and R7000P 1.3.3.154 - Buffer Overflow in HTTP Header Handler
Dec 27, 2024
CVSS 7.3
EPSS 0.00
CVE-2024-12147 MEDIUM
Netgear R6900 1.0.1.26_1.0.20 - Buffer Overflow
Dec 04, 2024
CVSS 6.5
EPSS 0.00
CVE-2024-52030 MEDIUM
Netgear R7000P v1.3.3.154 - Buffer Overflow
Nov 05, 2024
CVSS 5.7
EPSS 0.00
CVE-2024-52029 MEDIUM
Netgear R7000P v1.3.3.154 - Buffer Overflow
Nov 05, 2024
CVSS 5.7
EPSS 0.00