Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3028▼ 62 respecto a la semana anterior
Críticas / altas1422▲ 60 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
131 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (4.3) | 0.24% | — | Netgear Cbr750 FirmwareNetgear Ex6120 FirmwareNetgear Ex6130 FirmwareNetgear Mr60 Firmware+31 | 9/6/2026 | 23/7/2026 | Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system. | |
| Analizada | Media (4.3) | 0.23% | — | Netgear Rbe970 FirmwareNetgear Rbr750 FirmwareNetgear Rbr840 FirmwareNetgear Rbr850 Firmware+9 | 9/6/2026 | 23/7/2026 | Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality. | |
| Analizada | Media (4.3) | 0.32% | — | Netgear Rbe370 FirmwareNetgear Rbe770 FirmwareNetgear Rbr750 FirmwareNetgear Rbr840 Firmware+10 | 9/6/2026 | 23/7/2026 | A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality. | |
| Analizada | Media (6.1) | 0.37% | — | Netgear Cbr750 FirmwareNetgear Nbr750 FirmwareNetgear Rbe370 FirmwareNetgear Rbe371 Firmware+21 | 13/1/2026 | 17/6/2026 | An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin. | |
| Analizada | Media (4.8) | 1.2% | — | Netgear Rbr750 FirmwareNetgear Rbr840 FirmwareNetgear Rbr850 FirmwareNetgear Rbr860 Firmware+8 | 13/1/2026 | 17/6/2026 | An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows network adjacent attackers authenticated over WiFi or on LAN to execute OS command injections on the router. DHCPv6 is not enabled by default. | |
| Analizada | Baja (1.1) | 0.32% | — | Netgear Rbe971 FirmwareNetgear Rbe970 FirmwareNetgear Rbr750 FirmwareNetgear Rbr850 Firmware+6 | 13/1/2026 | 17/6/2026 | An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections. | |
| Modificada | Crítica (9.8) | 9.0% | — | Netgear Rbr750 Firmware | 8/12/2023 | 17/6/2026 | In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd. | |
| Modificada | Media (4.8) | 0.42% | — | Netgear Rax200 FirmwareNetgear Mr60 FirmwareNetgear Rax20 FirmwareNetgear Rax45 Firmware+18 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX80 before 1.0.1.62, EX7500 before 1.0.0.72, R7900 before 1.0.4.38, R8000 before 1.0.4.68, RAX200 before 1.0.4.120, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4, MR60 before 1.0.6.110, RAX20 before 1.0.2.82, RAX45 before 1.0.2.72,… | |
| Modificada | Media (4.8) | 0.42% | — | Netgear Rax200 FirmwareNetgear Mr60 FirmwareNetgear Rax20 FirmwareNetgear Rax45 Firmware+26 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, R7000 before 1.0.11.116, R7900 before 1.0.4.38, R8000 before 1.0.4.68, RAX200 before 1.0.3.106, RBS40V before… | |
| Modificada | Media (4.8) | 0.42% | — | Netgear Rax200 FirmwareNetgear Mr60 FirmwareNetgear Rax20 FirmwareNetgear Rax45 Firmware+11 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by stored XSS. This affects RAX200 before 1.0.3.106, MR60 before 1.0.6.110, RAX20 before 1.0.2.82, RAX45 before 1.0.2.72, RAX80 before 1.0.3.106, MS60 before 1.0.6.110, RAX15 before 1.0.2.82, RAX50 before 1.0.2.72, RAX75 before 1.0.3.106, RBR750 before 3.2.16.6, RBR850 before… | |
| Modificada | Media (4.8) | 0.42% | — | Netgear Cbr40 FirmwareNetgear Eax20 FirmwareNetgear Eax80 FirmwareNetgear Ex6120 Firmware+24 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, R7960P before 1.4.1.66, RAX200 before 1.0.3.106, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4, EX3700 before… | |
| Modificada | Media (4.8) | 0.42% | — | Netgear Eax80 FirmwareNetgear Ex3700 FirmwareNetgear Ex3800 FirmwareNetgear Ex6120 Firmware+11 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX80 before 1.0.1.64, EX3700 before 1.0.0.90, EX3800 before 1.0.0.90, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, RBW30 before 2.6.1.4, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before… | |
| Modificada | Media (4.8) | 0.42% | — | Netgear Eax20 FirmwareNetgear Eax80 FirmwareNetgear Ex3700 FirmwareNetgear Ex3800 Firmware+11 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by stored XSS. This affects EAX20 before 1.0.0.36, EAX80 before 1.0.1.62, EX3700 before 1.0.0.90, EX3800 before 1.0.0.90, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, RBW30 before 2.6.1.4, RBK752 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before… | |
| Modificada | Media (6.1) | 0.60% | — | Netgear Cbr40 FirmwareNetgear Eax20 FirmwareNetgear Eax80 FirmwareNetgear Ex6120 Firmware+29 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by reflected XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.32, EAX80 before 1.0.1.62, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7000 before 1.0.1.104, EX7500 before 1.0.0.72, R7000 before 1.0.11.110, R7900 before 1.0.4.30, R7960P before 1.4.1.66, R8000 before… | |
| Modificada | Alta (8.8) | 0.90% | — | Netgear Cbr750 FirmwareNetgear Rbk752 FirmwareNetgear Rbr750 FirmwareNetgear Rbs750 Firmware+3 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12. | |
| Modificada | Alta (8.8) | 1.1% | — | Netgear Cbr750 FirmwareNetgear Rbk752 FirmwareNetgear Rbr750 FirmwareNetgear Rbs750 Firmware+3 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12. | |
| Modificada | Alta (8.8) | 0.83% | — | Netgear Cbr750 FirmwareNetgear Rbk752 FirmwareNetgear Rbr750 FirmwareNetgear Rbs750 Firmware+3 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 4.6.3.6, RBR750 before 3.2.17.12, RBR850 before 3.2.17.12, RBS750 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, and RBK852 before 3.2.17.12. | |
| Modificada | Alta (8.8) | 0.83% | — | Netgear Cbr750 FirmwareNetgear Rbk752 FirmwareNetgear Rbr750 FirmwareNetgear Rbs750 Firmware+3 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12. | |
| Modificada | Alta (8.8) | 0.98% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear Rbk752 FirmwareNetgear Rbr750 Firmware+4 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12. | |
| Modificada | Crítica (9.8) | 1.7% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear Rbk752 FirmwareNetgear Rbr750 Firmware+4 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12. | |
| Modificada | Alta (8.8) | 0.83% | — | Netgear Cbr750 FirmwareNetgear Rbk752 FirmwareNetgear Rbr750 FirmwareNetgear Rbs750 Firmware+3 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12. | |
| Modificada | Alta (8.8) | 0.82% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear Rbk752 FirmwareNetgear Rbr750 Firmware+6 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 3.2.18.2, RBK752 before 3.2.17.12, RBR750 before 3.2.17.12, RBS750 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBS40V before… | |
| Modificada | Crítica (9.8) | 2.4% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear Eax20 FirmwareNetgear Eax80 Firmware+36 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20 before 1.0.0.58, EAX80 before 1.0.1.68, EX7500 before 1.0.0.74, LAX20 before 1.1.6.28, MK62 before 1.0.6.116, MR60 before 1.0.6.116, MS60 before 1.0.6.116, R6400… | |
| Modificada | Crítica (9.8) | 2.0% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear Eax20 FirmwareNetgear Eax80 Firmware+44 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 3.2.18.2, EAX20 before 1.0.0.58, EAX80 before 1.0.1.68, EX3700 before 1.0.0.94, EX3800 before 1.0.0.94, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7000 before 1.0.1.104,… | |
| Modificada | Crítica (9.8) | 2.0% | — | Netgear Cbr40 FirmwareNetgear Cbr750 FirmwareNetgear Eax20 FirmwareNetgear Eax80 Firmware+38 | 26/12/2021 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20 before 1.0.0.58, EAX80 before 1.0.1.68, LAX20 before 1.1.6.28, MR60 before 1.0.6.116, MR80 before 1.1.2.20, MS60 before 1.0.6.116, MS80 before 1.1.2.20, MK62 before… |