Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2661▼ 437 respecto a la semana anterior
Críticas / altas1284▼ 85 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (5.6) | 0.47% | — | Netgear Lbr1020 FirmwareNetgear Lbr20 FirmwareNetgear R6700ax FirmwareNetgear R7800 Firmware+18 | 9/6/2026 | 23/7/2026 | Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations. | |
| Analizada | Alta (8.8) | 0.55% | — | Netgear D7800 FirmwareNetgear Ex2700 FirmwareNetgear Ex6100 FirmwareNetgear Ex6150 Firmware+37 | 7/5/2024 | 17/6/2026 | NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of… | |
| Modificada | Crítica (9.8) | 2.5% | — | Netgear Ex6250 FirmwareNetgear Ex7700 FirmwareNetgear Ex8000 FirmwareNetgear Lbr1020 Firmware+38 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects EX6200v2 before 1.0.1.86, EX6250 before 1.0.0.134, EX7700 before 1.0.0.216, EX8000 before 1.0.1.232, LBR1020 before 2.6.3.58, LBR20 before 2.6.3.50, R7800 before 1.0.2.80, R8900 before 1.0.5.26, R9000 before… | |
| Modificada | Media (5.5) | 0.58% | — | Netgear D7800 FirmwareNetgear Ex2700 FirmwareNetgear Wn3000rpv2 FirmwareNetgear Wn3000rpv3 Firmware+14 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by disclosure of sensitive information. A UPnP request reveals a device's serial number, which can be used for a password reset. This affects D7800 before 1.0.1.66, EX2700 before 1.0.1.68, WN3000RPv2 before 1.0.0.90, WN3000RPv3 before 1.0.2.100, LBR1020 before 2.6.5.20, LBR20… | |
| Modificada | Alta (7.8) | 0.70% | — | Netgear D7800 FirmwareNetgear Ex2700 FirmwareNetgear Wn3000rpv2 FirmwareNetgear Wn3000rpv3 Firmware+14 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.66, EX2700 before 1.0.1.68, WN3000RPv2 before 1.0.0.90, WN3000RPv3 before 1.0.2.100, LBR1020 before 2.6.5.20, LBR20 before 2.6.5.32, R6700AX before 1.0.10.110, R7800 before 1.0.2.86, R8900 before… |