NETGEAR
Number 63 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Combines these spellings from source records: NETGEAR, Netgear, netgear
Total vulnerabilities
301
Critical
13
High
129
Known Exploited
7
Exploit available
45
Network, no login needed
12.9%
Of 287 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 49 | 0 | 4 | 38 | 7 | 0 |
| 2025 | 40 | 3 | 22 | 13 | 2 | 0 |
| 2024 | 115 | 2 | 62 | 50 | 1 | 0 |
| 2023 | 45 | 2 | 9 | 8 | 15 | 11 |
| 2022 | 6 | 0 | 5 | 1 | 0 | 0 |
| 2021 | 19 | 1 | 13 | 5 | 0 | 0 |
| 2020 | 17 | 2 | 9 | 5 | 0 | 1 |
| 2019 | 2 | 0 | 2 | 0 | 0 | 0 |
| 2018 | 2 | 0 | 0 | 0 | 0 | 2 |
| 2017 | 5 | 3 | 2 | 0 | 0 | 0 |
| 2016 | 1 | 0 | 1 | 0 | 0 | 0 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| r7000p_firmware | 27 | 5 |
| ProSAFE Network Management System | 23 | 23 |
| RAX30 | 23 | 15 |
| SRX5308 | 17 | 0 |
| R6700 | 12 | 8 |
| r8500_firmware | 12 | 4 |
| Multiple Routers | 10 | 7 |
| EX6200 | 8 | 8 |
| R7800 | 8 | 5 |
| JWNR2000v2 | 7 | 4 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Memory Corruption | 67 | 28 |
| Command Injection | 43 | 35 |
| Improper Input Validation | 29 | 1 |
| Authentication Issues | 21 | 11 |
| Stack-based Buffer Overflow | 19 | 17 |
| Cross-Site Scripting | 17 | 1 |
| Information Disclosure | 11 | 2 |
| Path Traversal | 7 | 5 |
| SQL Injection | 7 | 7 |
| Improper Certificate Validation | 6 | 3 |
Known to be attacked
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2020-26919 | Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability | Critical | 57.5% | |
| CVE-2016-1555 | NETGEAR Multiple WAP Devices Command Injection Vulnerability | Critical | 98.3% | |
| CVE-2017-6334 | NETGEAR DGN2200 Devices OS Command Injection Vulnerability | High | 72.6% | |
| CVE-2017-6077 | NETGEAR DGN2200 Remote Code Execution Vulnerability | Critical | 68.7% | |
| CVE-2016-10174 | NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability | Critical | 83.3% | |
| CVE-2017-5521 | NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability | High | 89.4% | |
| CVE-2016-6277 | NETGEAR Multiple Routers Remote Code Execution Vulnerability | High | 99.8% |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-123180 | Missing Authentication Vulnerability in NETGEAR Nighthawk RAX30 models | High | n/a | |
| CVE-2026-123178 | Insufficient Input Validation Vulnerability in NETGEAR Orbi RBR350 | Medium | n/a | |
| CVE-2026-9218 | Insufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized access | Medium | 0.2% | |
| CVE-2026-11732 | Insufficient input validation vulnerability exists in website blocking feature of certain NETGEAR RAX/CAX series models | High | 0.2% | |
| CVE-2026-11731 | Authentication Bypass Vulnerability in Certain NETGEAR RAX Series Models | High | 0.3% | |
| CVE-2026-11730 | Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models | Medium | 0.2% | |
| CVE-2026-107918 | Insufficient input validation vulnerability in NETGEAR R7300 | Medium | 0.2% | |
| CVE-2026-107917 | Insufficient input validation vulnerability in NETGEAR R7300 router | Medium | 0.2% | |
| CVE-2026-9216 | Insufficient input validation vulnerability exists in certain NETGEAR RAX Models | Low | 0.4% | |
| CVE-2026-9215 | A CSRF vulnerability exists in certain NETGEAR XR series devices | Medium | 0.2% |