# NETGEAR vulnerabilities Source: https://junglewise.ai/threats/vendors/netgear Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/netgear.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 55 vulnerabilities in NETGEAR: 2 in the last 7 days and 10 in the last 90 days, 9 of them critical and 6 exploited in the wild. The most recent, CVE-2026-123180, was published on 10 November 2026. 6 vulnerabilities in the last four weeks, up from none in the four before. 67 technologies have a page of their own. ## Counts - Last 7 days: 2 - Last 30 days: 2 - Last 90 days: 10 - All time: 55 (9 critical, 6 exploited in the wild) ## About NETGEAR NETGEAR is a multinational computer networking company that produces hardware for consumers, businesses, and service providers. ## Latest NETGEAR vulnerabilities - [CVE-2026-123180: Netgear RAX missing authentication in management interface](https://junglewise.ai/threats/cve-2026-123180-a-missing-authentication-vulnerability-in-the-listed-netgear-rax) (high, CVSS 8.8, published 10 Nov 2026) - [CVE-2026-123178: NETGEAR Orbi router command injection in input validation](https://junglewise.ai/threats/cve-2026-123178-an-insufficient-input-validation-vulnerability-in-the-listed) (medium, CVSS 4.5, published 10 Nov 2026) - [CVE-2026-9218: NETGEAR routers insufficient input validation in NTP setting](https://junglewise.ai/threats/cve-2026-9218-insufficient-input-validation-vulnerability-in-time-server-ntp) (medium, CVSS 4.5, published 13 Oct 2026) - [CVE-2026-11732: NETGEAR RAX/CAX router insufficient input validation in Block Sites](https://junglewise.ai/threats/cve-2026-11732-an-insufficient-input-validation-vulnerability-in-the-website) (high, CVSS 8.8, published 13 Oct 2026) - [CVE-2026-11731: NETGEAR RAX series authentication bypass in management service](https://junglewise.ai/threats/cve-2026-11731-an-authentication-bypass-vulnerability-in-the-listed-netgear-rax) (high, CVSS 8.8, published 13 Oct 2026) - [CVE-2026-11730: NETGEAR EX series extender session randomness vulnerability](https://junglewise.ai/threats/cve-2026-11730-insufficient-session-randomness-vulnerability-in-the-listed) (medium, CVSS 5.4, published 13 Oct 2026) - [CVE-2026-107918: NETGEAR R7300 insufficient input validation in LAN Setup](https://junglewise.ai/threats/cve-2026-107918-insufficient-input-validation-vulnerability-in-the-lan-setup) (medium, CVSS 4.5, published 13 Oct 2026) - [CVE-2026-107917: NETGEAR R7300 insufficient input validation in PPPoE Setup](https://junglewise.ai/threats/cve-2026-107917-insufficient-input-validation-vulnerability-in-the-pppoe-setup) (medium, CVSS 4.5, published 13 Oct 2026) - [CVE-2026-9216: NETGEAR RAX series insufficient input validation in management UI](https://junglewise.ai/threats/cve-2026-9216-netgear-rax-series-insufficient-input-validation-in-management-ui) (low, CVSS 3.5, published 8 Sep 2026) - [CVE-2026-9215: NETGEAR XR gaming routers CSRF vulnerability](https://junglewise.ai/threats/cve-2026-9215-netgear-xr-gaming-routers-csrf-vulnerability) (medium, CVSS 6.7, published 8 Sep 2026) - [CVE-2026-9214: NETGEAR R7000 insufficient input validation in firmware](https://junglewise.ai/threats/cve-2026-9214-netgear-r7000-insufficient-input-validation-in-firmware) (medium, CVSS 4.5, published 11 Aug 2026) - [CVE-2026-11814: NETGEAR Nighthawk and Orbi routers command injection vulnerability](https://junglewise.ai/threats/cve-2026-11814-netgear-nighthawk-and-orbi-routers-command-injection) (medium, CVSS 6.8, published 11 Aug 2026) - [CVE-2026-11739: A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker…](https://junglewise.ai/threats/cve-2026-11739-a-command-injection-vulnerability-in-certain-affected-netgear) (medium, CVSS 6.4, published 11 Aug 2026) - [CVE-2026-11738: Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected…](https://junglewise.ai/threats/cve-2026-11738-insufficient-input-validation-vulnerability-in-the-listed-netgear) (medium, CVSS 4.4, published 11 Aug 2026) - [CVE-2026-11737: Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected…](https://junglewise.ai/threats/cve-2026-11737-insufficient-input-validation-vulnerability-in-the-listed-netgear) (medium, CVSS 4.5, published 11 Aug 2026) - [CVE-2026-11733: A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt…](https://junglewise.ai/threats/cve-2026-11733-a-buffer-overflow-vulnerability-in-the-listed-netgear-models) (medium, CVSS 4.9, published 11 Aug 2026) - [CVE-2026-62659: NETGEAR WAX333 improper input validation in settings configuration](https://junglewise.ai/threats/cve-2026-62659-netgear-wax333-improper-input-validation-in-settings) (info, CVSS 4.3, published 14 Jul 2026) - [CVE-2026-62658: NETGEAR Nighthawk RAX series command execution via improper input validation](https://junglewise.ai/threats/cve-2026-62658-netgear-nighthawk-rax-series-command-execution-via-improper-input) (info, CVSS 4.7, published 14 Jul 2026) - [CVE-2026-62657: NETGEAR Nighthawk and Gaming Routers certificate validation bypass](https://junglewise.ai/threats/cve-2026-62657-netgear-nighthawk-and-gaming-routers-certificate-validation) (info, CVSS 4.9, published 14 Jul 2026) - [CVE-2026-62656: NETGEAR RAX Routers command execution via improper input validation](https://junglewise.ai/threats/cve-2026-62656-netgear-rax-routers-command-execution-via-improper-input) (info, CVSS 5.4, published 14 Jul 2026) - [CVE-2026-62655: NETGEAR Orbi stack-based buffer overflow](https://junglewise.ai/threats/cve-2026-62655-netgear-orbi-stack-based-buffer-overflow) (info, CVSS 5.7, published 14 Jul 2026) - [CVE-2026-15757: NETGEAR DGND3700v1 improper input validation](https://junglewise.ai/threats/cve-2026-15757-netgear-dgnd3700v1-improper-input-validation) (info, CVSS 6.3, published 14 Jul 2026) - [CVE-2026-9213: NETGEAR Gaming Routers remote code execution via traffic tampering](https://junglewise.ai/threats/cve-2026-9213-netgear-gaming-routers-remote-code-execution-via-traffic-tampering) (info, CVSS 6.9, published 9 Jun 2026) - [CVE-2026-9211: Netgear Multiple Routers improper input validation](https://junglewise.ai/threats/cve-2026-9211-netgear-multiple-routers-improper-input-validation) (info, CVSS 5.2, published 9 Jun 2026) - [CVE-2026-9210: NETGEAR multiple router models improper input validation](https://junglewise.ai/threats/cve-2026-9210-netgear-multiple-router-models-improper-input-validation) (info, CVSS 4.9, published 9 Jun 2026) ## Most severe NETGEAR vulnerabilities - [CVE-2017-6862: NETGEAR Multiple Devices Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2017-6862-netgear-multiple-devices-buffer-overflow-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 8 Jun 2022) - [CVE-2016-10174: NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2016-10174-netgear-wnr2000v5-router-buffer-overflow-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 25 Mar 2022) - [CVE-2016-1555: NETGEAR Multiple WAP Devices Command Injection Vulnerability](https://junglewise.ai/threats/cve-2016-1555-netgear-multiple-wap-devices-command-injection-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 25 Mar 2022) - [CVE-2017-6077: NETGEAR DGN2200 Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-6077-netgear-dgn2200-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 7 Mar 2022) - [CVE-2020-26919: Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability](https://junglewise.ai/threats/cve-2020-26919-netgear-jgs516pe-devices-missing-function-level-access-control) (critical, exploited in the wild, CVSS 9.8, published 3 Nov 2021) - [CVE-2017-6334: NETGEAR DGN2200 Devices OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2017-6334-netgear-dgn2200-devices-os-command-injection-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 25 Mar 2022) - [CVE-2025-50526: Netgear EX8000 V1.0.0.126 was discovered to contain a command injection vulnerability via the switch_status function.](https://junglewise.ai/threats/cve-2025-50526-netgear-ex8000-v1-0-0-126-was-discovered-to-contain-a-command) (critical, CVSS 9.8, published 23 Dec 2025) - [CVE-2016-10176: NETGEAR WNR2000 authentication bypass and RCE in uhttpd](https://junglewise.ai/threats/cve-2016-10176-netgear-wnr2000-authentication-bypass-and-rce-in-uhttpd) (critical, CVSS 9.8, published 30 Jan 2017) - [CVE-2016-10175: NETGEAR WNR2000 information disclosure in BRS_netgear_success.html](https://junglewise.ai/threats/cve-2016-10175-netgear-wnr2000-information-disclosure-in-brs-netgear-success) (critical, CVSS 9.8, published 30 Jan 2017) - [CVE-2025-12944: Improper input validation in NETGEAR DGN2200v4 (N300 Wireless ADSL2+ Modem Router) allows attackers with direct…](https://junglewise.ai/threats/cve-2025-12944-improper-input-validation-in-netgear-dgn2200v4-n300-wireless) (high, CVSS 8.8, published 11 Nov 2025) ## Vulnerabilities per week 6 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 2 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 6 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 2 | 0 | 0 | ## NETGEAR technologies - [NETGEAR RAX50](https://junglewise.ai/threats/technologies/rax50): 12 vulnerabilities - [NETGEAR RAX43](https://junglewise.ai/threats/technologies/rax43): 11 vulnerabilities - [NETGEAR RAX45](https://junglewise.ai/threats/technologies/rax45): 10 vulnerabilities - [NETGEAR RAXE500](https://junglewise.ai/threats/technologies/raxe500): 10 vulnerabilities - [NETGEAR RAX20](https://junglewise.ai/threats/technologies/rax20): 8 vulnerabilities - [NETGEAR RAX42](https://junglewise.ai/threats/technologies/rax42): 8 vulnerabilities - [NETGEAR XR1000](https://junglewise.ai/threats/technologies/xr1000): 8 vulnerabilities - [NETGEAR RAX30](https://junglewise.ai/threats/technologies/rax30): 7 vulnerabilities - [NETGEAR RAX41](https://junglewise.ai/threats/technologies/rax41): 7 vulnerabilities - [NETGEAR RAXE450](https://junglewise.ai/threats/technologies/raxe450): 7 vulnerabilities - [NETGEAR MR60](https://junglewise.ai/threats/technologies/mr60): 6 vulnerabilities - [NETGEAR MR70](https://junglewise.ai/threats/technologies/mr70): 6 vulnerabilities - [NETGEAR MS60](https://junglewise.ai/threats/technologies/ms60): 6 vulnerabilities - [NETGEAR MS70](https://junglewise.ai/threats/technologies/ms70): 6 vulnerabilities - [NETGEAR RAX35v2](https://junglewise.ai/threats/technologies/rax35v2): 6 vulnerabilities - [NETGEAR Rax43 Firmware](https://junglewise.ai/threats/technologies/rax43-firmware): 6 vulnerabilities - [NETGEAR Rax50 Firmware](https://junglewise.ai/threats/technologies/rax50-firmware): 6 vulnerabilities - [NETGEAR RAX54Sv2](https://junglewise.ai/threats/technologies/rax54sv2): 6 vulnerabilities - [NETGEAR R7000](https://junglewise.ai/threats/technologies/r7000): 5 vulnerabilities - [NETGEAR RAX41v2](https://junglewise.ai/threats/technologies/rax41v2): 5 vulnerabilities - [NETGEAR RAX42v2](https://junglewise.ai/threats/technologies/rax42v2): 5 vulnerabilities - [NETGEAR RAX43v2](https://junglewise.ai/threats/technologies/rax43v2): 5 vulnerabilities - [NETGEAR Rax45 Firmware](https://junglewise.ai/threats/technologies/rax45-firmware): 5 vulnerabilities - [NETGEAR RAX49s](https://junglewise.ai/threats/technologies/rax49s): 5 vulnerabilities - [NETGEAR RAX50v2](https://junglewise.ai/threats/technologies/rax50v2): 5 vulnerabilities - [NETGEAR RBRE960](https://junglewise.ai/threats/technologies/rbre960): 5 vulnerabilities - [NETGEAR RBSE960](https://junglewise.ai/threats/technologies/rbse960): 5 vulnerabilities - [NETGEAR R7000P](https://junglewise.ai/threats/technologies/r7000p): 4 vulnerabilities - [NETGEAR Rax20 Firmware](https://junglewise.ai/threats/technologies/rax20-firmware): 4 vulnerabilities - [NETGEAR Rax30 Firmware](https://junglewise.ai/threats/technologies/rax30-firmware): 4 vulnerabilities - [NETGEAR Rax41 Firmware](https://junglewise.ai/threats/technologies/rax41-firmware): 4 vulnerabilities - [NETGEAR Rax41v2 Firmware](https://junglewise.ai/threats/technologies/rax41v2-firmware): 4 vulnerabilities - [NETGEAR Rax42 Firmware](https://junglewise.ai/threats/technologies/rax42-firmware): 4 vulnerabilities - [NETGEAR Rax42v2 Firmware](https://junglewise.ai/threats/technologies/rax42v2-firmware): 4 vulnerabilities - [NETGEAR Rax43v2 Firmware](https://junglewise.ai/threats/technologies/rax43v2-firmware): 4 vulnerabilities - [NETGEAR Rax49s Firmware](https://junglewise.ai/threats/technologies/rax49s-firmware): 4 vulnerabilities - [NETGEAR RAX50S](https://junglewise.ai/threats/technologies/rax50s): 4 vulnerabilities - [NETGEAR Rax50v2 Firmware](https://junglewise.ai/threats/technologies/rax50v2-firmware): 4 vulnerabilities - [NETGEAR RAX54S](https://junglewise.ai/threats/technologies/rax54s): 4 vulnerabilities - [NETGEAR Rax54sv2 Firmware](https://junglewise.ai/threats/technologies/rax54sv2-firmware): 4 vulnerabilities - [NETGEAR RAXE300](https://junglewise.ai/threats/technologies/raxe300): 4 vulnerabilities - [NETGEAR RBR860](https://junglewise.ai/threats/technologies/rbr860): 4 vulnerabilities - [NETGEAR RBRE950](https://junglewise.ai/threats/technologies/rbre950): 4 vulnerabilities - [NETGEAR RBS860](https://junglewise.ai/threats/technologies/rbs860): 4 vulnerabilities - [NETGEAR RBSE950](https://junglewise.ai/threats/technologies/rbse950): 4 vulnerabilities - [NETGEAR WNR2000v5 Firmware](https://junglewise.ai/threats/technologies/wnr2000v5): 4 vulnerabilities - [NETGEAR EX6120](https://junglewise.ai/threats/technologies/ex6120): 3 vulnerabilities - [NETGEAR Mr60 Firmware](https://junglewise.ai/threats/technologies/mr60-firmware): 3 vulnerabilities - [NETGEAR MR80](https://junglewise.ai/threats/technologies/mr80): 3 vulnerabilities - [NETGEAR Ms60 Firmware](https://junglewise.ai/threats/technologies/ms60-firmware): 3 vulnerabilities - [NETGEAR MS80](https://junglewise.ai/threats/technologies/ms80): 3 vulnerabilities - [NETGEAR Rax28](https://junglewise.ai/threats/technologies/rax28): 3 vulnerabilities - [NETGEAR Rax29](https://junglewise.ai/threats/technologies/rax29): 3 vulnerabilities - [NETGEAR RAX40v2](https://junglewise.ai/threats/technologies/rax40v2): 3 vulnerabilities - [NETGEAR RAX48](https://junglewise.ai/threats/technologies/rax48): 3 vulnerabilities - [NETGEAR Rax54s Firmware](https://junglewise.ai/threats/technologies/rax54s-firmware): 3 vulnerabilities - [NETGEAR RBE970](https://junglewise.ai/threats/technologies/rbe970): 3 vulnerabilities - [NETGEAR RBR750](https://junglewise.ai/threats/technologies/rbr750): 3 vulnerabilities - [NETGEAR RBR840](https://junglewise.ai/threats/technologies/rbr840): 3 vulnerabilities - [NETGEAR RBR850](https://junglewise.ai/threats/technologies/rbr850): 3 vulnerabilities - [NETGEAR RBS750](https://junglewise.ai/threats/technologies/rbs750): 3 vulnerabilities - [NETGEAR RBS840](https://junglewise.ai/threats/technologies/rbs840): 3 vulnerabilities - [NETGEAR RBS850](https://junglewise.ai/threats/technologies/rbs850): 3 vulnerabilities - [NETGEAR RS700](https://junglewise.ai/threats/technologies/rs700): 3 vulnerabilities - [NETGEAR WNR2000v3 Firmware](https://junglewise.ai/threats/technologies/wnr2000v3): 3 vulnerabilities - [NETGEAR WNR2000v4 Firmware](https://junglewise.ai/threats/technologies/wnr2000v4): 3 vulnerabilities - [NETGEAR XR1000v2](https://junglewise.ai/threats/technologies/xr1000v2): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "NETGEAR vulnerabilities", https://junglewise.ai/threats/vendors/netgear, 13 November 2026.