{"items":[{"id":"CVE-2026-107918","published":"2026-10-13T14:50:33.244Z","updated":"2026-10-16T14:31:46.667Z","title":"Insufficient input validation vulnerability in NETGEAR R7300","severity":"MEDIUM","score":4.3,"vendor":"NETGEAR","product":"R7300DST","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2026-107917","published":"2026-10-13T14:46:32.629Z","updated":"2026-10-16T14:28:26.559Z","title":"Insufficient input validation vulnerability in NETGEAR R7300 router","severity":"MEDIUM","score":4.3,"vendor":"NETGEAR","product":"R7300DST","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2026-11732","published":"2026-10-13T14:42:50.698Z","updated":"2026-10-16T14:10:44.857Z","title":"Insufficient input validation vulnerability exists in website blocking feature of certain NETGEAR RAX/CAX series models","severity":"MEDIUM","score":6.3,"vendor":"NETGEAR","product":"CAX30","kev":false,"epss":0.00241,"kevAdded":null},{"id":"CVE-2026-11731","published":"2026-10-13T14:41:42.298Z","updated":"2026-10-16T13:58:30.825Z","title":"Authentication Bypass Vulnerability in Certain NETGEAR RAX Series Models","severity":"MEDIUM","score":6.3,"vendor":"NETGEAR","product":"RAX30","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2026-11730","published":"2026-10-13T14:38:16.110Z","updated":"2026-10-19T19:02:53.835Z","title":"Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models","severity":"LOW","score":2.1,"vendor":"NETGEAR","product":"EX3700","kev":false,"epss":0.00185,"kevAdded":null},{"id":"CVE-2026-9218","published":"2026-10-13T14:34:34.055Z","updated":"2026-10-16T13:44:29.724Z","title":"Insufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized access","severity":"MEDIUM","score":4.3,"vendor":"NETGEAR","product":"CBR40","kev":false,"epss":0.00185,"kevAdded":null},{"id":"CVE-2026-9216","published":"2026-09-08T17:09:12.157Z","updated":"2026-10-13T16:31:50.469Z","title":"Insufficient input validation vulnerability exists in certain NETGEAR RAX Models","severity":"LOW","score":1.2,"vendor":"NETGEAR","product":"RAX30","kev":false,"epss":0.0036,"kevAdded":null},{"id":"CVE-2026-9215","published":"2026-09-08T17:06:47.865Z","updated":"2026-10-13T16:33:16.019Z","title":"A CSRF vulnerability exists in certain NETGEAR XR series devices","severity":"LOW","score":1.8,"vendor":"NETGEAR","product":"XR1000v2","kev":false,"epss":0.00195,"kevAdded":null},{"id":"CVE-2026-9214","published":"2026-08-11T15:06:21.125Z","updated":"2026-08-12T07:14:57.379Z","title":"Insufficient input validation in NETGEAR R7000 router allows administrators to tamper with the device.","severity":"MEDIUM","score":4.3,"vendor":"NETGEAR","product":"R7000","kev":false,"epss":0.0023,"kevAdded":null},{"id":"CVE-2026-11736","published":"2026-08-11T15:06:19.565Z","updated":"2026-08-12T07:36:07.626Z","title":"Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers","severity":"LOW","score":1.9,"vendor":"NETGEAR","product":"RAX20","kev":false,"epss":0.00768,"kevAdded":null},{"id":"CVE-2026-11735","published":"2026-08-11T15:06:17.896Z","updated":"2026-08-12T07:32:29.550Z","title":"Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models","severity":"LOW","score":1.9,"vendor":"NETGEAR","product":"R7000","kev":false,"epss":0.00768,"kevAdded":null},{"id":"CVE-2026-11738","published":"2026-08-11T15:06:16.318Z","updated":"2026-08-12T07:41:53.324Z","title":"Insufficient input validation in certain NETGEAR Nighthawk routers allows administrators to tamper with the device.","severity":"MEDIUM","score":4.3,"vendor":"NETGEAR","product":"R7000","kev":false,"epss":0.00403,"kevAdded":null},{"id":"CVE-2026-11739","published":"2026-08-11T15:06:14.908Z","updated":"2026-08-12T07:44:33.040Z","title":"Command injection vulnerability in some NETGEAR Nighthawk devices","severity":"MEDIUM","score":4.9,"vendor":"NETGEAR","product":"MR60","kev":false,"epss":0.0255,"kevAdded":null},{"id":"CVE-2026-11734","published":"2026-08-11T15:06:13.282Z","updated":"2026-08-12T07:28:55.020Z","title":"Device administrator can interrupt the normal operation of some NETGEAR Nighthawk devices.","severity":"LOW","score":1.1,"vendor":"NETGEAR","product":"MR70","kev":false,"epss":0.00886,"kevAdded":null},{"id":"CVE-2026-11733","published":"2026-08-11T15:06:11.758Z","updated":"2026-08-12T07:17:16.418Z","title":"Buffer overflow vulnerability in some NETGEAR Nighthawk routers","severity":"LOW","score":1.1,"vendor":"NETGEAR","product":"RAX41","kev":false,"epss":0.00776,"kevAdded":null},{"id":"CVE-2026-11737","published":"2026-08-11T15:06:10.227Z","updated":"2026-08-12T07:39:19.719Z","title":"Some NETGEAR Nighthawk devices allow administrators to tamper with the device","severity":"MEDIUM","score":4.3,"vendor":"NETGEAR","product":"RAX20","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2026-11814","published":"2026-08-11T15:06:08.351Z","updated":"2026-08-12T14:42:32.098Z","title":"Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers","severity":"MEDIUM","score":4.9,"vendor":"NETGEAR","product":"BE9300","kev":false,"epss":0.02183,"kevAdded":null},{"id":"CVE-2026-62659","published":"2026-07-14T17:48:45.532Z","updated":"2026-07-15T16:04:55.710Z","title":"Authenticated users can make unauthorized changes on NETGEAR WAX333 Access Points","severity":"MEDIUM","score":4.3,"vendor":"NETGEAR","product":"WAX333","kev":false,"epss":0.0024,"kevAdded":null},{"id":"CVE-2026-15757","published":"2026-07-14T17:46:15.979Z","updated":"2026-07-15T16:50:16.246Z","title":"Insufficient input validation vulnerability in NETGEAR DGND3700v1 modem router","severity":"MEDIUM","score":6.3,"vendor":"NETGEAR","product":"DGND3700v1","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2026-62656","published":"2026-07-14T17:46:15.194Z","updated":"2026-07-15T16:53:59.077Z","title":"Post-authenticated command injection vulnerability found in certain NETGEAR RAX models","severity":"MEDIUM","score":5.4,"vendor":"NETGEAR","product":"RAXE450","kev":false,"epss":0.00256,"kevAdded":null},{"id":"CVE-2026-62655","published":"2026-07-14T17:46:14.452Z","updated":"2026-07-15T16:52:24.542Z","title":"A DoS vulnerability due to stack overflow exists in certain NETGEAR Orbi models","severity":"MEDIUM","score":5.7,"vendor":"NETGEAR","product":"RBR860","kev":false,"epss":0.00325,"kevAdded":null},{"id":"CVE-2026-62657","published":"2026-07-14T17:46:13.757Z","updated":"2026-07-15T16:56:03.166Z","title":"Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models","severity":"MEDIUM","score":4.9,"vendor":"NETGEAR","product":"MR70","kev":false,"epss":0.0015,"kevAdded":null},{"id":"CVE-2026-62658","published":"2026-07-14T17:46:12.018Z","updated":"2026-07-15T17:01:41.135Z","title":"Post-authentication Command Injection Vulnerability in certain Nighthawk RAX series models","severity":"MEDIUM","score":4.7,"vendor":"NETGEAR","product":"RAX43","kev":false,"epss":0.00302,"kevAdded":null},{"id":"CVE-2026-0420","published":"2026-06-09T15:50:53.619Z","updated":"2026-06-11T05:19:09.117Z","title":"Missing TLS certificate validation in NETGEAR's ReadyCloud client app","severity":"MEDIUM","score":4.6,"vendor":"NETGEAR","product":"RAX120v1","kev":false,"epss":0.00135,"kevAdded":null},{"id":"CVE-2026-9212","published":"2026-06-09T15:50:53.044Z","updated":"2026-11-04T17:34:33.879Z","title":"Insufficient authentication and input validation in certain NETGEAR products","severity":"MEDIUM","score":5.6,"vendor":"NETGEAR","product":"LBR1020","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2026-0411","published":"2026-06-09T15:50:52.418Z","updated":"2026-06-11T05:23:03.895Z","title":"A Sensitive Information Disclosure Vulnerability in NETGEAR Orbi Satellites","severity":"MEDIUM","score":4.2,"vendor":"NETGEAR","product":"RBE970","kev":false,"epss":0.00278,"kevAdded":null},{"id":"CVE-2026-0415","published":"2026-06-09T15:50:51.816Z","updated":"2026-06-10T12:55:15.787Z","title":"Insufficient input validation vulnerability in certain Orbi routers","severity":"MEDIUM","score":4.3,"vendor":"NETGEAR","product":"RBE970","kev":false,"epss":0.00229,"kevAdded":null},{"id":"CVE-2026-0414","published":"2026-06-09T15:50:51.171Z","updated":"2026-06-11T05:32:52.140Z","title":"Insufficient Input Validation Allows Unauthorized Modification of Router Software in certain NETGEAR Routers","severity":"MEDIUM","score":4.3,"vendor":"NETGEAR","product":"RBE970","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2026-0413","published":"2026-06-09T15:50:50.648Z","updated":"2026-06-11T15:26:11.850Z","title":"Buffer overflow vulnerability in certain NETGEAR Nighthawk routers","severity":"MEDIUM","score":4.3,"vendor":"NETGEAR","product":"RBE370","kev":false,"epss":0.00323,"kevAdded":null},{"id":"CVE-2026-0418","published":"2026-06-09T15:50:50.069Z","updated":"2026-06-10T15:56:54.459Z","title":"Certain NETGEAR devices allow administrators to tamper with system","severity":"MEDIUM","score":4.3,"vendor":"NETGEAR","product":"CBR750","kev":false,"epss":0.00245,"kevAdded":null},{"id":"CVE-2026-0417","published":"2026-06-09T15:50:49.507Z","updated":"2026-06-10T15:49:33.259Z","title":"Insufficient input validation in certain NETGEAR routers","severity":"MEDIUM","score":4.3,"vendor":"NETGEAR","product":"MR60","kev":false,"epss":0.00229,"kevAdded":null},{"id":"CVE-2026-9210","published":"2026-06-09T15:50:48.947Z","updated":"2026-06-11T05:38:03.646Z","title":"Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router","severity":"MEDIUM","score":4.9,"vendor":"NETGEAR","product":"EX3700","kev":false,"epss":0.00216,"kevAdded":null},{"id":"CVE-2026-9211","published":"2026-06-09T15:50:48.437Z","updated":"2026-06-10T18:16:48.508Z","title":"Certain NETGEAR routers allow unauthenticated users to gain control of the router","severity":"MEDIUM","score":5.2,"vendor":"NETGEAR","product":"CAX30","kev":false,"epss":0.00235,"kevAdded":null},{"id":"CVE-2026-0416","published":"2026-06-09T15:50:47.870Z","updated":"2026-06-11T06:02:54.919Z","title":"Improper input validation in certain NETGEAR routers allows unauthorized modification of protected router functionality","severity":"MEDIUM","score":4.3,"vendor":"NETGEAR","product":"RAXE450","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2026-3088","published":"2026-06-09T15:50:47.289Z","updated":"2026-06-10T18:10:51.832Z","title":"Unauthenticated users can disrupt router operation","severity":"MEDIUM","score":4.9,"vendor":"NETGEAR","product":"RBR860","kev":false,"epss":0.00357,"kevAdded":null},{"id":"CVE-2026-9213","published":"2026-06-09T15:50:46.744Z","updated":"2026-06-11T05:15:19.347Z","title":"Insufficient input validation in certain NETGEAR routers","severity":"MEDIUM","score":6.9,"vendor":"NETGEAR","product":"MR70","kev":false,"epss":0.00397,"kevAdded":null},{"id":"CVE-2026-0419","published":"2026-06-09T15:50:46.210Z","updated":"2026-06-10T16:07:19.018Z","title":"Insufficient input validation vulnerability in NETGEAR JR6150","severity":"MEDIUM","score":4.4,"vendor":"NETGEAR","product":"JR6150","kev":false,"epss":0.00289,"kevAdded":null},{"id":"CVE-2026-0412","published":"2026-06-09T15:50:45.590Z","updated":"2026-06-10T15:30:26.190Z","title":"Insufficient input validation vulnerability in NETGEAR JR6150 Web UI","severity":"MEDIUM","score":4.3,"vendor":"NETGEAR","product":"JR6150","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2026-0410","published":"2026-06-09T15:41:47.808Z","updated":"2026-06-10T15:24:02.912Z","title":"Insufficient input validation in certain NETGEAR routers","severity":"LOW","score":1.9,"vendor":"NETGEAR","product":"R7000","kev":false,"epss":0.00219,"kevAdded":null},{"id":"CVE-2026-0409","published":"2026-06-09T15:39:09.050Z","updated":"2026-06-10T11:50:20.952Z","title":"Netgear Orbi 370 Series Remote Code Execution vulnerability","severity":"MEDIUM","score":4.8,"vendor":"NETGEAR","product":"Orbi 370","kev":false,"epss":0.00256,"kevAdded":null},{"id":"CVE-2026-0404","published":"2026-01-13T16:01:14.944Z","updated":"2026-02-26T15:04:43.482Z","title":"Insufficient input validation in NETGEAR Orbi routers","severity":"MEDIUM","score":4.8,"vendor":"NETGEAR","product":"RBRE960","kev":false,"epss":0.01062,"kevAdded":null},{"id":"CVE-2026-0408","published":"2026-01-13T16:01:11.201Z","updated":"2026-02-26T15:04:43.819Z","title":"Path traversal vulnerability in Netgear WiFi Range Extenders","severity":"MEDIUM","score":6.1,"vendor":"NETGEAR","product":"EX5000","kev":false,"epss":0.0025,"kevAdded":null},{"id":"CVE-2026-0407","published":"2026-01-13T16:01:04.157Z","updated":"2026-02-26T15:04:44.118Z","title":"Authentication bypass in NETGEAR WiFi Range Extenders via network adjacent attacks","severity":"MEDIUM","score":6.1,"vendor":"NETGEAR","product":"EX5000","kev":false,"epss":0.00247,"kevAdded":null},{"id":"CVE-2026-0406","published":"2026-01-13T16:00:59.458Z","updated":"2026-02-26T15:04:44.409Z","title":"Insufficient input validation in NETGEAR Nighthawk router XR1000v2","severity":"MEDIUM","score":6.1,"vendor":"NETGEAR","product":"XR1000v2","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2026-0405","published":"2026-01-13T16:00:48.296Z","updated":"2026-02-26T15:04:44.730Z","title":"Authentication Bypass in NETGEAR Orbi Devices","severity":"MEDIUM","score":6.1,"vendor":"NETGEAR","product":"RBE970","kev":false,"epss":0.00361,"kevAdded":null},{"id":"CVE-2026-0403","published":"2026-01-13T16:00:25.831Z","updated":"2026-11-04T00:16:52.276Z","title":"Insufficient input validation in NETGEAR Orbi routers","severity":"LOW","score":1.1,"vendor":"NETGEAR","product":"RBR750","kev":false,"epss":0.0033,"kevAdded":null},{"id":"CVE-2025-12946","published":"2025-12-09T17:02:20.739Z","updated":"2026-02-26T16:57:03.457Z","title":"Improper input validation in NETGEAR Nighthawk routers","severity":"MEDIUM","score":4.4,"vendor":"NETGEAR","product":"RS700","kev":false,"epss":0.00293,"kevAdded":null},{"id":"CVE-2025-12945","published":"2025-12-09T17:01:38.595Z","updated":"2026-08-26T16:17:50.127Z","title":"Improper input validation in NETGEAR Nighthawk router R7000P","severity":"LOW","score":1.1,"vendor":"NETGEAR","product":"R7000P","kev":false,"epss":0.01151,"kevAdded":null},{"id":"CVE-2025-12941","published":"2025-12-09T17:01:04.702Z","updated":"2025-12-09T20:44:09.127Z","title":"Denial of Service Vulnerability in NETGEAR C6220 and C6230","severity":"MEDIUM","score":5,"vendor":"NETGEAR","product":"C6220","kev":false,"epss":0.00196,"kevAdded":null},{"id":"CVE-2025-12944","published":"2025-11-11T16:17:51.202Z","updated":"2026-02-26T16:57:56.973Z","title":"Improper input validation in NETGEAR DGN2200v4","severity":"MEDIUM","score":6.8,"vendor":"NETGEAR","product":"DGN2200v4","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2025-12943","published":"2025-11-11T16:17:44.766Z","updated":"2026-02-26T16:57:57.314Z","title":"Improper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE300","severity":"MEDIUM","score":5.2,"vendor":"NETGEAR","product":"RAX30","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2025-12942","published":"2025-11-11T16:17:37.212Z","updated":"2026-02-26T16:57:57.630Z","title":"Improper input validation in NETGEAR R6260 and R6850","severity":"MEDIUM","score":4.8,"vendor":"NETGEAR","product":"R6260","kev":false,"epss":0.00318,"kevAdded":null},{"id":"CVE-2025-12940","published":"2025-11-11T16:17:25.837Z","updated":"2025-11-14T17:41:18.640Z","title":"Credentials recorded in logs in NETGEAR WAX610 and WAX610Y","severity":"LOW","score":0.5,"vendor":"NETGEAR","product":"WAX610","kev":false,"epss":0.00291,"kevAdded":null},{"id":"CVE-2018-11106","published":"2020-04-01T16:31:45.000Z","updated":"2024-08-05T07:54:36.460Z","title":"NETGEAR has released fixes for a pre-authentication command injection in request_handler.php security vulnerability on the following product models: WC7500,…","severity":"CRITICAL","score":9.8,"vendor":"NETGEAR","product":"WC7500","kev":false,"epss":0.02601,"kevAdded":null},{"id":"CVE-2017-6862","published":"2017-05-26T20:00:00.000Z","updated":"2025-10-21T23:55:40.404Z","title":"NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code…","severity":"CRITICAL","score":9.8,"vendor":null,"product":"NETGEAR All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66, WNR2000v5 1.0.0.42","kev":true,"epss":0.45748,"kevAdded":"2022-06-08"}]}