Netgear vulnerabilities and fixes

CVEs that mention Netgear, ranked by priority. 6 tracked.

Netgear has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-08-11. Highest priority: CVE-2026-11739 (score 39/100).

• CVE-2026-11739 MEDIUM 6.4 UPGRADE UPGRADE A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent att
• CVE-2026-11733 MEDIUM 4.9 UPGRADE UPGRADE A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily inte
• CVE-2026-11734 LOW 2.7 UPGRADE UPGRADE A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the a
• CVE-2026-11738 MEDIUM 4.4 UPGRADE UPGRADE Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators c
• CVE-2026-11737 MEDIUM 4.5 UPGRADE UPGRADE Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators
• CVE-2026-9214 MEDIUM 4.5 MITIGATE Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators c

FAQ

How do I fix Netgear vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Netgear being exploited right now?

None of the tracked Netgear CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which Netgear CVE should I patch first?

CVE-2026-11739 currently ranks highest (39/100): A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent att.

← Back to latest CVEs