Vulnerabilidades em Netgear

217 resultados
Análise Vexday

O histórico de vulnerabilidades da Netgear soma 68 CVEs catalogadas, com taxa de exploração ativa abaixo da média geral do catálogo — nenhuma entrada registrada no CISA KEV. Ainda assim, o cenário não é isento de atenção: a CVE-2024-6646, com escore EPSS de 0,46 (o mais alto observado no conjunto), indica probabilidade relevante de exploração e merece acompanhamento prioritário. O tipo de falha mais recorrente é CWE-119 (erros de limitação de operações dentro de um buffer de memória), categoria historicamente associada a impacto elevado em dispositivos de rede e embarcados. Com 3 vulnerabilidades críticas e 2 com PoC pública disponível, o risco de escalada existe, especialmente em ambientes onde patches de firmware são aplicados com menor frequência.

CVE-2026-9214MEDIUMInsufficient input validation in NETGEAR R7000 router allows administrators to tamper with the device.EPSS 0.2%CVE-2026-0415MEDIUMInsufficient input validation vulnerability in certain Orbi routersEPSS 0.2%CVE-2026-0417MEDIUMInsufficient input validation in certain NETGEAR routersEPSS 0.2%CVE-2026-0410LOWInsufficient input validation in certain NETGEAR routersEPSS 0.2%CVE-2026-9210MEDIUMCertain NETGEAR routers allow authenticated administrators to gain unintended control of the routerEPSS 0.2%CVE-2025-12941MEDIUMDenial of Service Vulnerability in NETGEAR C6220 and C6230EPSS 0.2%CVE-2026-9215LOWA CSRF vulnerability exists in certain NETGEAR XR series devicesEPSS 0.2%CVE-2026-9218MEDIUMInsufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized accessEPSS 0.2%CVE-2026-11730LOWInsufficient session randomness vulnerability exists in certain NETGEAR EX Series ModelsEPSS 0.2%CVE-2026-0416MEDIUMImproper input validation in certain NETGEAR routers allows unauthorized modification of protected router functionalityEPSS 0.2%CVE-2026-0414MEDIUMInsufficient Input Validation Allows Unauthorized Modification of Router Software in certain NETGEAR RoutersEPSS 0.2%CVE-2025-12943MEDIUMImproper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE300EPSS 0.2%CVE-2026-0412MEDIUMInsufficient input validation vulnerability in NETGEAR JR6150 Web UIEPSS 0.2%CVE-2026-107918MEDIUMInsufficient input validation vulnerability in NETGEAR R7300EPSS 0.2%CVE-2026-107917MEDIUMInsufficient input validation vulnerability in NETGEAR R7300 routerEPSS 0.2%CVE-2026-62657MEDIUMCertificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk modelsEPSS 0.1%CVE-2026-0420MEDIUMMissing TLS certificate validation in NETGEAR's ReadyCloud client appEPSS 0.1%