https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-52082.htmlhttps://patchthecve.com/cve/CVE-2025-52082.htmlWed, 17 Jun 2026 09:35:59 +0000MEDIUM 6.5: In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow exists in the HTTPD service through the usb_device.cgi endpoint. The vulnerability occurs when processing POST requests containing the read_access parameter.https://patchthecve.com/cve/CVE-2025-52081.htmlhttps://patchthecve.com/cve/CVE-2025-52081.htmlWed, 17 Jun 2026 09:35:59 +0000MEDIUM 6.5: In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow vulnerability exists in the HTTPD service through the usb_device.cgi endpoint. The vulnerability occurs when processing POST requests containing the usb_folder parameter.https://patchthecve.com/cve/CVE-2025-52080.htmlhttps://patchthecve.com/cve/CVE-2025-52080.htmlWed, 17 Jun 2026 09:35:59 +0000MEDIUM 6.5: In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow vulnerability exists in the HTTPD service through the usb_device.cgi endpoint. The vulnerability occurs when processing POST requests containing the share_name parameter.https://patchthecve.com/cve/CVE-2024-52026.htmlhttps://patchthecve.com/cve/CVE-2024-52026.htmlWed, 17 Jun 2026 08:06:50 +0000MEDIUM 5.7: Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at bsw_pppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.https://patchthecve.com/cve/CVE-2024-52025.htmlhttps://patchthecve.com/cve/CVE-2024-52025.htmlWed, 17 Jun 2026 08:06:50 +0000MEDIUM 5.7: Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at geniepppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.https://patchthecve.com/cve/CVE-2024-52024.htmlhttps://patchthecve.com/cve/CVE-2024-52024.htmlWed, 17 Jun 2026 08:06:49 +0000MEDIUM 5.7: Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at wizpppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.https://patchthecve.com/cve/CVE-2024-52023.htmlhttps://patchthecve.com/cve/CVE-2024-52023.htmlWed, 17 Jun 2026 08:06:49 +0000MEDIUM 5.7: Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe2.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.https://patchthecve.com/cve/CVE-2024-52022.htmlhttps://patchthecve.com/cve/CVE-2024-52022.htmlWed, 17 Jun 2026 08:06:49 +0000HIGH 8.0: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component wlg_adv.cgi via the apmode_gateway parameter. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.https://patchthecve.com/cve/CVE-2024-52018.htmlhttps://patchthecve.com/cve/CVE-2024-52018.htmlWed, 17 Jun 2026 08:06:49 +0000HIGH 8.0: Netgear XR300 v1.0.3.78 was discovered to contain a command injection vulnerability in the system_name parameter at genie_dyn.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.https://patchthecve.com/cve/CVE-2024-52017.htmlhttps://patchthecve.com/cve/CVE-2024-52017.htmlWed, 17 Jun 2026 08:06:48 +0000MEDIUM 5.7: Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the passphrase parameter at bridge_wireless_main.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.https://patchthecve.com/cve/CVE-2024-52016.htmlhttps://patchthecve.com/cve/CVE-2024-52016.htmlWed, 17 Jun 2026 08:06:48 +0000MEDIUM 5.7: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component wlg_adv.cgi via the apmode_dns1_pri and apmode_dns1_sec parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoShttps://patchthecve.com/cve/CVE-2024-52015.htmlhttps://patchthecve.com/cve/CVE-2024-52015.htmlWed, 17 Jun 2026 08:06:48 +0000MEDIUM 5.7: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at bsw_pptp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.https://patchthecve.com/cve/CVE-2024-52014.htmlhttps://patchthecve.com/cve/CVE-2024-52014.htmlWed, 17 Jun 2026 08:06:48 +0000MEDIUM 5.7: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at genie_pptp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.https://patchthecve.com/cve/CVE-2024-52013.htmlhttps://patchthecve.com/cve/CVE-2024-52013.htmlWed, 17 Jun 2026 08:06:48 +0000MEDIUM 5.7: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at wiz_pptp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.https://patchthecve.com/cve/CVE-2024-51022.htmlhttps://patchthecve.com/cve/CVE-2024-51022.htmlWed, 17 Jun 2026 08:05:19 +0000MEDIUM 5.7: Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssid parameter in bridge_wireless_main.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.https://patchthecve.com/cve/CVE-2024-51021.htmlhttps://patchthecve.com/cve/CVE-2024-51021.htmlWed, 17 Jun 2026 08:05:19 +0000HIGH 8.0: Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a command injection vulnerability via the wan_gateway parameter at genie_fix2.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.https://patchthecve.com/cve/CVE-2024-51016.htmlhttps://patchthecve.com/cve/CVE-2024-51016.htmlWed, 17 Jun 2026 08:05:18 +0000MEDIUM 5.7: Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the addName%d parameter in usb_approve.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.https://patchthecve.com/cve/CVE-2024-51014.htmlhttps://patchthecve.com/cve/CVE-2024-51014.htmlWed, 17 Jun 2026 08:05:18 +0000MEDIUM 5.7: Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssid_an parameter in bridge_wireless_main.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.https://patchthecve.com/cve/CVE-2024-51011.htmlhttps://patchthecve.com/cve/CVE-2024-51011.htmlWed, 17 Jun 2026 08:05:17 +0000MEDIUM 5.7: Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.https://patchthecve.com/cve/CVE-2024-51010.htmlhttps://patchthecve.com/cve/CVE-2024-51010.htmlWed, 17 Jun 2026 08:05:17 +0000HIGH 8.0: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component ap_mode.cgi via the apmode_gateway parameter. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.https://patchthecve.com/cve/CVE-2024-51008.htmlhttps://patchthecve.com/cve/CVE-2024-51008.htmlWed, 17 Jun 2026 08:05:16 +0000HIGH 8.0: Netgear XR300 v1.0.3.78 was discovered to contain a command injection vulnerability in the system_name parameter at wiz_dyn.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.https://patchthecve.com/cve/CVE-2024-51007.htmlhttps://patchthecve.com/cve/CVE-2024-51007.htmlWed, 17 Jun 2026 08:05:16 +0000MEDIUM 5.7: Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the passphrase parameter at wireless.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.https://patchthecve.com/cve/CVE-2024-51003.htmlhttps://patchthecve.com/cve/CVE-2024-51003.htmlWed, 17 Jun 2026 08:05:16 +0000MEDIUM 5.7: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component ap_mode.cgi via the apmode_dns1_pri and apmode_dns1_sec parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoShttps://patchthecve.com/cve/CVE-2024-51002.htmlhttps://patchthecve.com/cve/CVE-2024-51002.htmlWed, 17 Jun 2026 08:05:16 +0000MEDIUM 5.7: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the l2tp_user_ip parameter at l2tp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.https://patchthecve.com/cve/CVE-2024-50997.htmlhttps://patchthecve.com/cve/CVE-2024-50997.htmlWed, 17 Jun 2026 08:05:15 +0000MEDIUM 5.7: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at pptp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.https://patchthecve.com/cve/CVE-2024-50996.htmlhttps://patchthecve.com/cve/CVE-2024-50996.htmlWed, 17 Jun 2026 08:05:15 +0000MEDIUM 5.7: Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the bpa_server parameter at genie_bpa.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.https://patchthecve.com/cve/CVE-2021-34983.htmlhttps://patchthecve.com/cve/CVE-2021-34983.htmlWed, 17 Jun 2026 03:56:55 +0000MEDIUM 6.5: NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of multiple NETGEAR routers. Authentication is not required to exploit th