Mr80 Firmware (Netgear) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2026-06-09. Vendor: Netgear.
CVEs of Mr80 Firmware
- CVE-2026-9210 - CVSS 4.9 (medium), 2026-06-09: Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make…
- CVE-2026-0418 - CVSS 4.5 (medium), 2026-06-09: Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.
- CVE-2026-0417 - CVSS 4.5 (medium), 2026-06-09: Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with…
- CVE-2021-34982 - CVSS 8.8 (high), 2024-05-07: NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to…
- CVE-2021-34983 - CVSS 6.5 (medium), 2024-05-07: NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability. This vulnerability allows network-adjacent…
- CVE-2022-27647 - CVSS 8 (high), 2023-03-29: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.…
- CVE-2022-27642 - CVSS 8.8 (high), 2023-03-29: This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers.…
- CVE-2021-45620 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20…
- CVE-2021-45613 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, D7000v2…