How many CVEs does Netgear have?

Netgear has 1,349 published CVE records since 2002, including 100 in the last two years.

How many Netgear CVEs are in CISA KEV?

Yes — 8 of Netgear's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which Netgear products have the most CVEs?

The Netgear products with the most published CVEs are R7800, r7800 firmware, R9000, r9000 firmware, R6700.

What are the most common weakness types in Netgear CVEs?

Netgear's CVEs most often map to these CWE weakness types: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-121 (Stack-based Buffer Overflow), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')).

Are there public exploits for Netgear vulnerabilities?

Yes — 208 of Netgear's CVEs have a known public exploit.

How many critical Netgear vulnerabilities are there?

Netgear has 220 critical and 589 high-severity CVEs.

What is the average severity of Netgear CVEs?

The average CVSS base score across Netgear's scored CVEs is 7.5.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

1,349 CVEs

8 in CISA KEV

Netgear Vulnerabilities

Name: Netgear vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Netgear.

1,349

Total CVEs

Published

8

In CISA KEV

Exploited in the wild

208

Public exploits

PoC or exploit code

7.5

Avg CVSS

2002–2026

Overview

Netgear has 1,349 published CVE records since 2002, of which 8 are in CISA's Known Exploited Vulnerabilities catalog and 208 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Netgear products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on Netgear's vulnerability posture, as a share of its 1,349 published CVEs.

Average CVSS: 7.5
Critical / high: 60%
Actively exploited (KEV): 1%
Public exploit available: 15%
Patch available: 73%

Severity and exploitation

How the CVSS severity of Netgear's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical220

High589

Medium525

Low15

In CISA’s Known Exploited Vulnerabilities catalog

8

8 of Netgear's CVEs are confirmed exploited in the wild.

Public exploits

208

208 of Netgear's CVEs have a known public exploit available.

Most affected products

The Netgear products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Netgear CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Netgear CVE records.

Disclosure activity by year

How many Netgear CVEs were published each year.

2019

23

2020

631

2021

285

2022

46

2023

63

2024

118

2025

68

2026

32

Latest Netgear CVEs

The most recently disclosed vulnerabilities affecting Netgear.

Authenticated users can make unauthorized changes on NETGEAR WAX333 Access Points
CWE-20
Medium · CVSS 4.3
EPSS 0.2%2026-07-14
Insufficient input validation vulnerability in NETGEAR DGND3700v1 modem router
CWE-20
Medium · CVSS 6.3
EPSS 0.2%2026-07-14
Post-authenticated command injection vulnerability found in certain NETGEAR RAX models
CWE-20
Medium · CVSS 5.4
EPSS 0.2%2026-07-14
A DoS vulnerability due to stack overflow exists in certain NETGEAR Orbi models
CWE-121
Medium · CVSS 5.7
EPSS 0.2%2026-07-14
Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models
CWE-599
Medium · CVSS 4.9
EPSS 0.1%2026-07-14
Post-authentication Command Injection Vulnerability in certain Nighthawk RAX series models
CWE-20
Medium · CVSS 4.7
EPSS 0.2%2026-07-14
Missing TLS certificate validation in NETGEAR's ReadyCloud client app
CWE-325
Medium · CVSS 4.6
EPSS 0.1%2026-06-09
Insufficient authentication and input validation in certain NETGEAR products
CWE-306
Medium · CVSS 5.6
EPSS 0.3%2026-06-09
A Sensitive Information Disclosure Vulnerability in NETGEAR Orbi Satellites
CWE-200
Medium · CVSS 4.2
EPSS 0.3%2026-06-09
Insufficient input validation vulnerability in certain Orbi routers
CWE-20
Medium · CVSS 4.3
EPSS 0.2%2026-06-09
Arbitrary Code Execution vulnerability exists in RBE970
CWE-94
Medium · CVSS 4.3
EPSS 0.2%2026-06-09
Buffer overflow vulnerability in certain NETGEAR Nighthawk routers
CWE-121
Medium · CVSS 4.3
EPSS 0.3%2026-06-09

Track new Netgear CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor Netgear CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

Code-Projects1,441 CVEs GitLab1,424 CVEs Samsung Mobile1,339 CVEs SUSE1,308 CVEs mysql1,306 CVEs gnu1,264 CVEs Totolink1,238 CVEs torvalds1,166 CVEs

Browse all vendors

Frequently asked questions

Common questions about Netgear vulnerabilities.

How many CVEs does Netgear have?: Netgear has 1,349 published CVE records since 2002, including 100 in the last two years.
How many Netgear CVEs are in CISA KEV?: Yes — 8 of Netgear's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Which Netgear products have the most CVEs?: The Netgear products with the most published CVEs are R7800, r7800 firmware, R9000, r9000 firmware, R6700.
What are the most common weakness types in Netgear CVEs?: Netgear's CVEs most often map to these CWE weakness types: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-121 (Stack-based Buffer Overflow), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')).
Are there public exploits for Netgear vulnerabilities?: Yes — 208 of Netgear's CVEs have a known public exploit.
How many critical Netgear vulnerabilities are there?: Netgear has 220 critical and 589 high-severity CVEs.
What is the average severity of Netgear CVEs?: The average CVSS base score across Netgear's scored CVEs is 7.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Netgear vulnerabilities

Monitor new Netgear vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing