Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2855▼ 166 respecto a la semana anterior
Críticas / altas1379▲ 45 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)266▼ 260 respecto a la semana anterior
39 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (4.9) | 0.91% | — | Netgear Be9300 FirmwareNetgear Mr60 FirmwareNetgear Ms60 FirmwareNetgear R6700ax Firmware+22 | 11/8/2026 | 9/9/2026 | A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs. | |
| Analizada | Media (4.9) | 1.1% | — | Netgear Ms90 FirmwareNetgear Rax20 FirmwareNetgear Rax200 FirmwareNetgear Rax35 Firmware+23 | 11/8/2026 | 9/9/2026 | A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device. | |
| Analizada | Media (4.3) | 0.27% | — | Netgear Be9300 FirmwareNetgear Mr60 FirmwareNetgear Ms60 FirmwareNetgear R6700ax Firmware+22 | 11/8/2026 | 9/9/2026 | Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality. | |
| Analizada | Media (4.9) | 0.35% | — | Netgear Ex3700 FirmwareNetgear Ex3800 FirmwareNetgear Ex6120 FirmwareNetgear Ex6130 Firmware+27 | 9/6/2026 | 23/7/2026 | Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality. | |
| Analizada | Media (4.3) | 0.24% | — | Netgear Cbr750 FirmwareNetgear Ex6120 FirmwareNetgear Ex6130 FirmwareNetgear Mr60 Firmware+31 | 9/6/2026 | 23/7/2026 | Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system. | |
| Analizada | Media (4.3) | 0.23% | — | Netgear Mr60 FirmwareNetgear Mr70 FirmwareNetgear Mr80 FirmwareNetgear Ms60 Firmware+23 | 9/6/2026 | 23/7/2026 | Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity. | |
| Analizada | Media (6.5) | 0.33% | — | Netgear Xr1000 FirmwareNetgear Xr300 FirmwareNetgear D6220 FirmwareNetgear D6400 Firmware+48 | 7/5/2024 | 17/6/2026 | NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of multiple NETGEAR routers. Authentication is not required to exploit this vulnerability.… | |
| Analizada | Alta (8.8) | 0.58% | — | Netgear Dc112a FirmwareNetgear Ex3700 FirmwareNetgear Ex3800 FirmwareNetgear Ex6120 Firmware+48 | 7/5/2024 | 17/6/2026 | NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple NETGEAR routers. Authentication is not required to exploit this vulnerability. The specific flaw exists… | |
| Modificada | Crítica (9.8) | 1.1% | — | Netgear Cbr40 FirmwareNetgear Lax20 FirmwareNetgear Mk62 FirmwareNetgear Mr60 Firmware+11 | 1/9/2023 | 17/6/2026 | Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd. | |
| Modificada | Alta (8) | 1.5% | — | Netgear Cax80 FirmwareNetgear Lax20 FirmwareNetgear Mr60 FirmwareNetgear Mr80 Firmware+29 | 29/3/2023 | 17/6/2026 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling… | |
| Modificada | Alta (8.8) | 0.88% | — | Netgear Cax80 FirmwareNetgear Lax20 FirmwareNetgear Mr60 FirmwareNetgear Mr80 Firmware+29 | 29/3/2023 | 17/6/2026 | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service. The issue results from incorrect string matching logic… | |
| Modificada | Crítica (9.8) | 0.68% | — | Netgear Mr60 FirmwareNetgear Ms60 FirmwareNetgear R6900p FirmwareNetgear R7000p Firmware+2 | 13/2/2023 | 17/6/2026 | NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability. This affects MR60 before 1.1.7.132, MS60 before 1.1.7.132, R6900P before 1.3.3.154, R7000P before 1.3.3.154, R7960P before 1.4.4.94, and R8000P before 1.4.4.94. | |
| Modificada | Alta (7.8) | 0.45% | — | Netgear R7000p FirmwareNetgear R6900p FirmwareNetgear R7960p FirmwareNetgear R8000p Firmware+2 | 31/1/2023 | 17/6/2026 | Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to contain a pre-authentication stack overflow. | |
| Modificada | Media (4.8) | 0.42% | — | Netgear Rax200 FirmwareNetgear Mr60 FirmwareNetgear Rax20 FirmwareNetgear Rax45 Firmware+18 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX80 before 1.0.1.62, EX7500 before 1.0.0.72, R7900 before 1.0.4.38, R8000 before 1.0.4.68, RAX200 before 1.0.4.120, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4, MR60 before 1.0.6.110, RAX20 before 1.0.2.82, RAX45 before 1.0.2.72,… | |
| Modificada | Media (4.8) | 0.42% | — | Netgear Rax200 FirmwareNetgear Mr60 FirmwareNetgear Rax20 FirmwareNetgear Rax45 Firmware+26 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, R7000 before 1.0.11.116, R7900 before 1.0.4.38, R8000 before 1.0.4.68, RAX200 before 1.0.3.106, RBS40V before… | |
| Modificada | Media (4.8) | 0.42% | — | Netgear Rax200 FirmwareNetgear Mr60 FirmwareNetgear Rax20 FirmwareNetgear Rax45 Firmware+11 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by stored XSS. This affects RAX200 before 1.0.3.106, MR60 before 1.0.6.110, RAX20 before 1.0.2.82, RAX45 before 1.0.2.72, RAX80 before 1.0.3.106, MS60 before 1.0.6.110, RAX15 before 1.0.2.82, RAX50 before 1.0.2.72, RAX75 before 1.0.3.106, RBR750 before 3.2.16.6, RBR850 before… | |
| Modificada | Media (4.8) | 0.42% | — | Netgear Cbr40 FirmwareNetgear Eax20 FirmwareNetgear Eax80 FirmwareNetgear Ex6120 Firmware+24 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, R7960P before 1.4.1.66, RAX200 before 1.0.3.106, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4, EX3700 before… | |
| Modificada | Media (6.1) | 0.60% | — | Netgear Cbr40 FirmwareNetgear Eax20 FirmwareNetgear Eax80 FirmwareNetgear Ex6120 Firmware+29 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by reflected XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.32, EAX80 before 1.0.1.62, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7000 before 1.0.1.104, EX7500 before 1.0.0.72, R7000 before 1.0.11.110, R7900 before 1.0.4.30, R7960P before 1.4.1.66, R8000 before… | |
| Modificada | Crítica (9.8) | 2.4% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear Eax20 FirmwareNetgear Eax80 Firmware+36 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20 before 1.0.0.58, EAX80 before 1.0.1.68, EX7500 before 1.0.0.74, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 before 1.0.6.116, R6400… | |
| Modificada | Crítica (9.8) | 2.0% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear Eax20 FirmwareNetgear Eax80 Firmware+44 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 3.2.18.2, EAX20 before 1.0.0.58, EAX80 before 1.0.1.68, EX3700 before 1.0.0.94, EX3800 before 1.0.0.94, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7000 before 1.0.1.104,… | |
| Modificada | Crítica (9.8) | 2.0% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear Eax20 FirmwareNetgear Eax80 Firmware+38 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20 before 1.0.0.58, EAX80 before 1.0.1.68, LAX20 before 1.1.6.28, MR60 before 1.0.6.116, MR80 before 1.1.2.20, MS60 before 1.0.6.116, MS80 before 1.1.2.20, MK62 before… | |
| Modificada | Crítica (9.8) | 2.1% | — | Netgear Cbr40 FirmwareNetgear Eax20 FirmwareNetgear Eax80 FirmwareNetgear Ex7500 Firmware+29 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX7500 before 1.0.0.72, R6400 before 1.0.1.68, R6900P before 1.3.2.132, R7000 before 1.0.11.116, R7000P before 1.3.2.132, R7900 before 1.0.4.38,… | |
| Modificada | Crítica (9.8) | 2.0% | — | Netgear Cbr750 FirmwareNetgear Lax20 FirmwareNetgear Mk62 FirmwareNetgear Mr60 Firmware+28 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 3.2.18.2, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 before 1.0.6.116, R6900P before 1.3.3.140, R7000 before 1.0.11.126, R7000P before 1.3.3.140, R7850 before 1.0.5.68,… | |
| Modificada | Crítica (9.8) | 2.0% | — | Netgear D7000v2 FirmwareNetgear Lax20 FirmwareNetgear Mk62 FirmwareNetgear Mr60 Firmware+18 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7000v2 before 1.0.0.74, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 before 1.0.6.116, RAX15 before 1.0.3.96, RAX20 before 1.0.3.96, RAX200 before 1.0.4.120, RAX45 before 1.0.3.96, RAX50… | |
| Modificada | Crítica (9.8) | 2.0% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear D7000v2 FirmwareNetgear Lax20 Firmware+22 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, D7000v2 before 1.0.0.74, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 before 1.0.6.116, MR80 before 1.1.2.20, MS80 before 1.1.2.20, RAX15… |