Threat database

CVE-2026-107918 is an insufficient input validation vulnerability in the LAN Setup feature of the NETGEAR R7300DST router. It allows authenticated administrators on the local network to perform unauthorized actions on the router. This issue was discovered in a simulated environment and has not been confirmed on physical production devices. The vulnerability has a medium severity rating with a CVSS 4.3 score. No patch or official remediation information is currently available.

CVE-2026-107917 is an input validation vulnerability in the PPPoE Setup feature of the NETGEAR R7300DST router. It allows authenticated administrators on the local network to perform unauthorized actions. The issue was identified in a simulated environment and has not been confirmed on physical devices. The vulnerability affects firmware versions from 0 up to and including 1.0.0.74. The CVSS 4.0 score is 4.3, indicating a medium severity level.

CVE-2026-11732 is an input validation vulnerability in the website blocking feature of the NETGEAR CAX30 router. A network-adjacent attacker with network access, such as WiFi credentials, can exploit this flaw to run unauthorized commands on the router. This vulnerability impacts confidentiality, integrity, and availability but only when the Block Sites feature is enabled. The issue affects multiple versions prior to specific fixed releases. The CVSS 4.0 score rates this as a medium severity vulnerability.

CVE-2026-11731 is an authentication bypass vulnerability in NETGEAR RAX30 devices that allows an unauthenticated attacker with adjacent network access to the device's management service to access or modify administrative settings. This vulnerability affects versions prior to 1.0.15.110 and may compromise the confidentiality, integrity, and availability of device management functions.

CVE-2026-11730 is a low-severity vulnerability in the NETGEAR EX3700 WiFi extender models that results from incorrect usage of seeds in the pseudo-random number generator. This flaw allows a network-adjacent attacker with network access, such as having WiFi credentials, to predict valid session identifiers and hijack an authenticated administrator session on the device's web management portal.

CVE-2026-9218 is an improper input validation vulnerability in the time server (NTP) setting of the NETGEAR CBR40 router. An attacker with local network access and administrator credentials can run unauthorized commands on the router, impacting its integrity. There is no impact on confidentiality or availability. The vulnerability has a medium severity score of 4.3 and affects multiple firmware versions prior to certain fixed releases.

CVE-2026-9216 is a stack-based buffer overflow vulnerability in the NETGEAR RAX30 router management UI. It allows a network-adjacent attacker with network access, such as WiFi credentials, to crash the router's management interface. This vulnerability does not affect the confidentiality or integrity of the device or its core services like WiFi connectivity. The impact is limited to the management UI crashing, without causing a denial of service to the router's main functions.

CVE-2026-9215 is a cross-site request forgery (CSRF) vulnerability affecting NETGEAR XR1000v2 routers. An attacker can exploit this vulnerability by tricking a router administrator into performing unintended actions, potentially altering router configurations and disrupting operations. There is no impact on confidentiality. The vulnerability has a low severity score and no known exploits in the wild. No official patch or remediation information is provided.

Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.

A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality.

A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.

A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.

A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.

A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality.

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.

A security flaw was discovered in the NETGEAR WAX333 Access Point that could allow someone already logged in and connected to the local network to make unauthorized changes to the device's settings

A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send unauthorized commands to the device. This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.