PatchSiren

NETGEAR CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM NETGEAR CVE published 2026-06-09

CVE-2026-9213

A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamper with traffic between the router and the Internet, to execute code on the device. The CVSS score for this vulnerability is 6.9, and the severity is MEDIUM.

MEDIUM NETGEAR CVE published 2026-06-09

CVE-2026-9212

A vulnerability, CVE-2026-9212, was found in various NETGEAR models. This vulnerability has a CVSS score of 5.6 and is classified as MEDIUM severity. It allows users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations due to insufficient authentication and input validation.

MEDIUM NETGEAR CVE published 2026-06-09

CVE-2026-9211

CVE-2026-9211 is a medium-severity vulnerability (CVSS Score: 5.2) that allows an unauthenticated user on the local network to gain control of the router and make unauthorized changes to its operation. The vulnerability was published on 2026-06-09T17:17:51.380Z and last modified on 2026-06-10T19:16:39.107Z. The affected vendor is currently listed as Unknown Vendor, but evidence suggests it may be Netgear. [truncated]

MEDIUM NETGEAR CVE published 2026-06-09

CVE-2026-9210

CVE-2026-9210 is a medium severity vulnerability (CVSS Score: 4.9) that affects certain NETGEAR models. The vulnerability is caused by insufficient input validation, allowing authenticated administrators connected to the local network to make unauthorized modifications to router software and functionality.

MEDIUM NETGEAR CVE published 2026-06-09

CVE-2026-0416

CVE-2026-0416 is a MEDIUM-severity vulnerability (CVSS Score: 4.3) that affects certain NETGEAR router models. The vulnerability is caused by insufficient input validation, allowing an authenticated administrator with local network access to submit crafted input that bypasses intended management interface restrictions. This can result in unauthorized modification of protected router software or functional [truncated]

Known exploited NETGEAR CVE published 2022-09-08

CVE-2017-5521

CVE-2017-5521 is a NETGEAR sensitive-information exposure issue that CISA added to its Known Exploited Vulnerabilities catalog on 2022-09-08. Because CISA treats it as a known exploited vulnerability, defenders should prioritize identifying affected NETGEAR devices, applying vendor guidance, and removing any end-of-life devices that are still in service.

Known exploited NETGEAR CVE published 2022-06-08

CVE-2017-6862

CVE-2017-6862 is a NETGEAR buffer overflow vulnerability affecting multiple devices and is listed by CISA in the Known Exploited Vulnerabilities (KEV) catalog. That KEV designation means defenders should treat it as actively exploited and prioritize remediation using vendor guidance. The supplied corpus does not include product-model specifics or a CVSS score, so the safest interpretation is to validate e [truncated]

Known exploited NETGEAR CVE published 2022-03-25

CVE-2017-6334

CVE-2017-6334 is an OS command injection vulnerability affecting NETGEAR DGN2200 devices. CISA lists it in the Known Exploited Vulnerabilities catalog, which indicates known exploitation and raises the urgency for defenders. CISA’s noted required action is to disconnect the impacted product if it is still in use, because the product is end-of-life.

Known exploited NETGEAR CVE published 2022-03-25

CVE-2016-1555

CVE-2016-1555 is a command injection vulnerability affecting NETGEAR Wireless Access Point (WAP) devices. CISA has placed it in the Known Exploited Vulnerabilities catalog, which means defenders should treat it as a high-priority remediation item for any exposed or unpatched NETGEAR WAP deployments. The supplied source material does not include affected model versions or a detailed attack path, so validat [truncated]

Known exploited NETGEAR CVE published 2022-03-25

CVE-2016-10174

CVE-2016-10174 is a buffer overflow vulnerability affecting the NETGEAR WNR2000v5 Router. CISA lists it in the Known Exploited Vulnerabilities catalog, so defenders should treat it as a priority exposure and follow vendor update guidance promptly.

Known exploited NETGEAR CVE published 2022-03-07

CVE-2017-6077

CVE-2017-6077 is a remote code execution vulnerability affecting the NETGEAR Wireless Router DGN2200. CISA added it to the Known Exploited Vulnerabilities catalog on 2022-03-07, indicating it was considered actively exploited or otherwise confirmed as a real-world risk worthy of prioritized remediation. Organizations that still operate this model should treat the issue as high priority and follow vendor u [truncated]

Known exploited NETGEAR CVE published 2022-03-07

CVE-2016-6277

CVE-2016-6277 is a NETGEAR Multiple Routers remote code execution vulnerability that CISA has listed in its Known Exploited Vulnerabilities (KEV) catalog. That KEV listing means defenders should treat it as a high-priority exposure, especially on any NETGEAR router deployment that is still in service and not confirmed remediated. The supplied corpus does not include the attack path or affected model list, [truncated]

Known exploited NETGEAR CVE published 2021-11-03

CVE-2020-26919

CVE-2020-26919 affects NETGEAR JGS516PE devices and is described as a missing function level access control vulnerability. In defensive terms, that means some device functions may not be restricted to the intended privilege level. CISA lists the issue in its Known Exploited Vulnerabilities catalog, which makes it a higher-priority remediation item than a routine advisory. The supplied timeline shows 2021- [truncated]

CRITICAL Netgear CVE published 2017-01-30

CVE-2016-10176

CVE-2016-10176 is a critical NETGEAR WNR2000v5 firmware issue in the embedded web server (uhttpd). The device exposes an authenticated apply.cgi handler and, more concerningly, an unauthenticated apply_noauth.cgi handler that can be used to perform sensitive actions. According to the CVE description, this can allow attackers to change router settings, including password-recovery questions, and can lead to [truncated]

CRITICAL Netgear CVE published 2017-01-30

CVE-2016-10175

CVE-2016-10175 describes an information-disclosure flaw in NETGEAR WNR2000v5 firmware where a request to /BRS_netgear_success.html can leak the device serial number. According to the supplied record, that serial number can then be used together with CVE-2016-10176 to recover the administrator username and password. NVD lists affected firmware as up to 1.0.0.34 and rates the issue CVSS 3.0 9.8 Critical.