Vulnerabilities
Summary — last 7 days
New vulnerabilities2,965▲ 27 vs. last week
Critical / high1,456▲ 193 vs. last week
New active exploitation (KEV)5▼ 3 vs. last week
Unscored (no CVSS)272▼ 254 vs. last week
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Analyzed | High (7.5) | 0.64% | — | Netgear Cbk40 FirmwareNetgear Cbk43 FirmwareNetgear Cbr40 Firmware | 3/12/2024 | 6/17/2026 | An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required. | |
| Analyzed | Medium (5.4) | 0.43% | — | Netgear Cbk40 FirmwareNetgear Cbr40 FirmwareNetgear Cbk43 Firmware | 3/12/2024 | 6/17/2026 | An information leak in the debuginfo.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required. | |
| Modified | High (8.8) | 2.0% | — | Netgear Cbk40 FirmwareNetgear Cbk43 FirmwareNetgear Cbr40 FirmwareNetgear Ex6200 Firmware+35 | 2/12/2021 | 6/17/2026 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UA_Parser utility. A crafted Host Name option in a DHCP request can trigger… |