Rax40v2 Firmware (Netgear) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2026-06-09. Vendor: Netgear.
CVEs of Rax40v2 Firmware
- CVE-2026-9210 - CVSS 4.9 (medium), 2026-06-09: Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make…
- CVE-2026-0418 - CVSS 4.5 (medium), 2026-06-09: Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.
- CVE-2026-0417 - CVSS 4.5 (medium), 2026-06-09: Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with…
- CVE-2021-34983 - CVSS 6.5 (medium), 2024-05-07: NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability. This vulnerability allows network-adjacent…
- CVE-2021-34982 - CVSS 8.8 (high), 2024-05-07: NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to…
- CVE-2021-45621 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 3.2.18.2, EAX20…
- CVE-2021-45613 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, D7000v2…
- CVE-2021-45620 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20…
- CVE-2021-45612 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20…
- CVE-2021-45616 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 3.2.18.2, LAX20 before 1.1.6.28, MK62…
- CVE-2021-45622 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.6, EAX20…
- CVE-2021-45614 - CVSS 9.8 (critical), 2021-12-26: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7000v2 before 1.0.0.74, LAX20 before 1.1.6.28, MK62…
- CVE-2021-34991 - CVSS 8.8 (high), 2021-11-15: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers.…
