What’s Vulnerable › Products

NETGEAR R7000 vulnerabilities

142 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your NETGEAR R7000 version is affected

Exploited NETGEAR R7000 vulnerabilities

• CVE-2016-6277 — NETGEAR Multiple Routers Remote Code Execution Vulnerability

Latest NETGEAR R7000 vulnerabilities

• CVE-2026-9218 — Insufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized access (CVSS 4.5)
• CVE-2026-9214 — Insufficient input validation in NETGEAR R7000 router allows administrators to tamper with the device. (CVSS 4.5)
• CVE-2026-11735 — Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models (CVSS 4.9)
• CVE-2026-9210 — Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router (CVSS 4.5)
• CVE-2026-0417 — Insufficient input validation in certain NETGEAR routers (CVSS 4.5)
• CVE-2026-0410 — Insufficient input validation in certain NETGEAR routers (CVSS 4.5)
• CVE-2022-40620 — (CVSS 7.7)
• CVE-2022-40619 — (CVSS 7.7)
• CVE-2025-44650 — (CVSS 7.5)
• CVE-2024-35520 — (CVSS 6.8)
• CVE-2021-34983 — NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2021-34982 — NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2024-1431 — Netgear R7000 Web Management Interface debuginfo.htm information disclosure (CVSS 6.5)
• CVE-2024-1430 — Netgear R7000 Web Management Interface currentsetting.htm information disclosure (CVSS 6.5)
• CVE-2023-36187 — (CVSS 9.8)
• CVE-2022-27647 — (CVSS 8.0)
• CVE-2022-27646 — (CVSS 8.8)
• CVE-2022-27645 — (CVSS 8.8)
• CVE-2022-27644 — (CVSS 8.8)
• CVE-2022-27643 — (CVSS 8.8)
• CVE-2022-27642 — (CVSS 8.8)
• CVE-2022-27641 — (CVSS 8.8)
• CVE-2022-48196 — (CVSS 9.8)
• CVE-2022-37235 — (CVSS 9.8)
• CVE-2022-37234 — (CVSS 7.8)