<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Patchfirst: NETGEAR vulnerabilities</title><link>https://patchfirst.co/vendor/netgear/</link><atom:link href="https://patchfirst.co/feed/vendor/netgear.xml" rel="self" type="application/rss+xml"/><description>New and newly exploited NETGEAR CVEs, with CISA KEV, EPSS and ATT&amp;CK context. Newest 50 by publication or KEV listing.</description><language>en-gb</language><ttl>360</ttl><lastBuildDate>Sat, 31 Oct 2026 05:11:25 GMT</lastBuildDate><item><title>CVE-2025-7407: Netgear D6400 diag.cgi os command injection</title><link>https://patchfirst.co/cve/CVE-2025-7407/</link><guid isPermaLink="false">CVE-2025-7407</guid><pubDate>Thu, 10 Jul 2025 00:00:00 GMT</pubDate><description>Netgear · D6400. Not in CISA KEV. EPSS 12.1% (higher than 96.1% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 68.6 of 100.</description><category>public-exploit</category></item><item><title>CVE-2024-12847: NETGEAR DGN setup.cgi OS Command Injection</title><link>https://patchfirst.co/cve/CVE-2024-12847/</link><guid isPermaLink="false">CVE-2024-12847</guid><pubDate>Fri, 10 Jan 2025 00:00:00 GMT</pubDate><description>NETGEAR · DGN1000. Not in CISA KEV. EPSS 30.4% (higher than 98.2% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 69.2 of 100.</description><category>public-exploit</category></item><item><title>CVE-2023-38096: NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability</title><link>https://patchfirst.co/cve/CVE-2023-38096/</link><guid isPermaLink="false">CVE-2023-38096</guid><pubDate>Fri, 03 May 2024 00:00:00 GMT</pubDate><description>NETGEAR · ProSAFE Network Management System. Not in CISA KEV. EPSS 82.0% (higher than 99.65% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 31.8 of 100.</description><category>public-exploit</category></item><item><title>CVE-2023-38099: NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability</title><link>https://patchfirst.co/cve/CVE-2023-38099/</link><guid isPermaLink="false">CVE-2023-38099</guid><pubDate>Fri, 03 May 2024 00:00:00 GMT</pubDate><description>NETGEAR · ProSAFE Network Management System. Not in CISA KEV. EPSS 56.8% (higher than 99.06% of CVEs). CVSS 8.8 HIGH. Priority 26.0 of 100.</description></item><item><title>CVE-2023-38095: NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution…</title><link>https://patchfirst.co/cve/CVE-2023-38095/</link><guid isPermaLink="false">CVE-2023-38095</guid><pubDate>Fri, 03 May 2024 00:00:00 GMT</pubDate><description>NETGEAR · ProSAFE Network Management System. Not in CISA KEV. EPSS 65.5% (higher than 99.26% of CVEs). CVSS 8.8 HIGH. Priority 26.0 of 100.</description></item><item><title>CVE-2023-41182: NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability</title><link>https://patchfirst.co/cve/CVE-2023-41182/</link><guid isPermaLink="false">CVE-2023-41182</guid><pubDate>Fri, 03 May 2024 00:00:00 GMT</pubDate><description>NETGEAR · ProSAFE Network Management System. Not in CISA KEV. EPSS 62.3% (higher than 99.18% of CVEs). CVSS 7.2 HIGH. Priority 24.9 of 100.</description></item><item><title>[KEV] CVE-2017-5521: NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability</title><link>https://patchfirst.co/cve/CVE-2017-5521/</link><guid isPermaLink="false">CVE-2017-5521#kev</guid><pubDate>Thu, 08 Sep 2022 00:00:00 GMT</pubDate><description>NETGEAR · Multiple Devices. In CISA KEV since 2022-09-08. ENISA EUVD lists it as exploited. EPSS 89.4% (higher than 99.78% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&amp;CK: T1190 Exploit Public-Facing Application; T1552 Unsecured Credentials. Priority 68.6 of 100.</description><category>kev</category><category>public-exploit</category><category>T1190</category><category>T1552</category></item><item><title>[KEV] CVE-2017-6862: NETGEAR Multiple Devices Buffer Overflow Vulnerability</title><link>https://patchfirst.co/cve/CVE-2017-6862/</link><guid isPermaLink="false">CVE-2017-6862#kev</guid><pubDate>Wed, 08 Jun 2022 00:00:00 GMT</pubDate><description>NETGEAR · Multiple Devices. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 45.7% (higher than 98.8% of CVEs). CVSS 9.8 CRITICAL. ATT&amp;CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 64.6 of 100.</description><category>kev</category><category>T1190</category><category>T1059</category></item><item><title>[KEV] CVE-2016-1555: NETGEAR Multiple WAP Devices Command Injection Vulnerability</title><link>https://patchfirst.co/cve/CVE-2016-1555/</link><guid isPermaLink="false">CVE-2016-1555#kev</guid><pubDate>Fri, 25 Mar 2022 00:00:00 GMT</pubDate><description>NETGEAR · Wireless Access Point (WAP) Devices. In CISA KEV since 2022-03-25. ENISA EUVD lists it as exploited. EPSS 98.3% (higher than 99.92% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&amp;CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.</description><category>kev</category><category>public-exploit</category><category>T1190</category><category>T1059</category></item><item><title>[KEV] CVE-2016-10174: NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability</title><link>https://patchfirst.co/cve/CVE-2016-10174/</link><guid isPermaLink="false">CVE-2016-10174#kev</guid><pubDate>Fri, 25 Mar 2022 00:00:00 GMT</pubDate><description>NETGEAR · WNR2000v5 Router. In CISA KEV since 2022-03-25. ENISA EUVD lists it as exploited. EPSS 83.3% (higher than 99.68% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&amp;CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.</description><category>kev</category><category>public-exploit</category><category>T1190</category><category>T1059</category></item><item><title>[KEV] CVE-2017-6334: NETGEAR DGN2200 Devices OS Command Injection Vulnerability</title><link>https://patchfirst.co/cve/CVE-2017-6334/</link><guid isPermaLink="false">CVE-2017-6334#kev</guid><pubDate>Fri, 25 Mar 2022 00:00:00 GMT</pubDate><description>NETGEAR · DGN2200 Devices. In CISA KEV since 2022-03-25. ENISA EUVD lists it as exploited. EPSS 72.6% (higher than 99.44% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&amp;CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.0 of 100.</description><category>kev</category><category>public-exploit</category><category>T1190</category><category>T1059</category></item><item><title>[KEV] CVE-2017-6077: NETGEAR DGN2200 Remote Code Execution Vulnerability</title><link>https://patchfirst.co/cve/CVE-2017-6077/</link><guid isPermaLink="false">CVE-2017-6077#kev</guid><pubDate>Mon, 07 Mar 2022 00:00:00 GMT</pubDate><description>NETGEAR · Wireless Router DGN2200. In CISA KEV since 2022-03-07. ENISA EUVD lists it as exploited. EPSS 68.7% (higher than 99.34% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&amp;CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.7 of 100.</description><category>kev</category><category>public-exploit</category><category>T1190</category><category>T1059</category></item><item><title>[KEV] CVE-2016-6277: NETGEAR Multiple Routers Remote Code Execution Vulnerability</title><link>https://patchfirst.co/cve/CVE-2016-6277/</link><guid isPermaLink="false">CVE-2016-6277#kev</guid><pubDate>Mon, 07 Mar 2022 00:00:00 GMT</pubDate><description>NETGEAR · Multiple Routers. In CISA KEV since 2022-03-07. ENISA EUVD lists it as exploited. EPSS 99.8% (higher than 99.96% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&amp;CK: T1059 Command and Scripting Interpreter. Priority 69.2 of 100.</description><category>kev</category><category>public-exploit</category><category>T1059</category></item><item><title>[KEV] CVE-2020-26919: Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability</title><link>https://patchfirst.co/cve/CVE-2020-26919/</link><guid isPermaLink="false">CVE-2020-26919#kev</guid><pubDate>Wed, 03 Nov 2021 00:00:00 GMT</pubDate><description>NETGEAR · JGS516PE Devices. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 57.5% (higher than 99.08% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&amp;CK: T1190 Exploit Public-Facing Application; T1098 Account Manipulation. Priority 69.7 of 100.</description><category>kev</category><category>public-exploit</category><category>T1190</category><category>T1098</category></item><item><title>CVE-2021-27273: This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE…</title><link>https://patchfirst.co/cve/CVE-2021-27273/</link><guid isPermaLink="false">CVE-2021-27273</guid><pubDate>Mon, 29 Mar 2021 00:00:00 GMT</pubDate><description>NETGEAR · ProSAFE Network Management System. Not in CISA KEV. EPSS 66.0% (higher than 99.27% of CVEs). CVSS 8.8 HIGH. Priority 26.0 of 100.</description></item><item><title>CVE-2021-27275: This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected…</title><link>https://patchfirst.co/cve/CVE-2021-27275/</link><guid isPermaLink="false">CVE-2021-27275</guid><pubDate>Mon, 29 Mar 2021 00:00:00 GMT</pubDate><description>NETGEAR · ProSAFE Network Management System. Not in CISA KEV. EPSS 74.1% (higher than 99.48% of CVEs). CVSS 8.3 HIGH. Priority 25.7 of 100.</description></item><item><title>CVE-2021-27276: This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE…</title><link>https://patchfirst.co/cve/CVE-2021-27276/</link><guid isPermaLink="false">CVE-2021-27276</guid><pubDate>Mon, 29 Mar 2021 00:00:00 GMT</pubDate><description>NETGEAR · ProSAFE Network Management System. Not in CISA KEV. EPSS 73.2% (higher than 99.46% of CVEs). CVSS 7.1 HIGH. Priority 24.9 of 100.</description></item><item><title>CVE-2021-27272: This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE…</title><link>https://patchfirst.co/cve/CVE-2021-27272/</link><guid isPermaLink="false">CVE-2021-27272</guid><pubDate>Mon, 29 Mar 2021 00:00:00 GMT</pubDate><description>NETGEAR · ProSAFE Network Management System. Not in CISA KEV. EPSS 74.5% (higher than 99.5% of CVEs). CVSS 7.1 HIGH. Priority 24.9 of 100.</description></item><item><title>CVE-2020-27866: This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR…</title><link>https://patchfirst.co/cve/CVE-2020-27866/</link><guid isPermaLink="false">CVE-2020-27866</guid><pubDate>Thu, 11 Feb 2021 00:00:00 GMT</pubDate><description>NETGEAR · Multiple Routers. Not in CISA KEV. EPSS 8.7% (higher than 95.1% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. Priority 70.2 of 100.</description><category>public-exploit</category></item><item><title>CVE-2020-27867: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR…</title><link>https://patchfirst.co/cve/CVE-2020-27867/</link><guid isPermaLink="false">CVE-2020-27867</guid><pubDate>Thu, 11 Feb 2021 00:00:00 GMT</pubDate><description>NETGEAR · Multiple Routers. Not in CISA KEV. EPSS 2.2% (higher than 82.8% of CVEs). CVSS 6.8 MEDIUM. Priority 58.2 of 100.</description></item><item><title>CVE-2020-10924: This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR…</title><link>https://patchfirst.co/cve/CVE-2020-10924/</link><guid isPermaLink="false">CVE-2020-10924</guid><pubDate>Tue, 28 Jul 2020 00:00:00 GMT</pubDate><description>NETGEAR · R6700. Not in CISA KEV. EPSS 87.3% (higher than 99.75% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. Priority 31.1 of 100.</description><category>public-exploit</category></item><item><title>CVE-2020-10923: This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR…</title><link>https://patchfirst.co/cve/CVE-2020-10923/</link><guid isPermaLink="false">CVE-2020-10923</guid><pubDate>Tue, 28 Jul 2020 00:00:00 GMT</pubDate><description>NETGEAR · R6700. Not in CISA KEV. EPSS 84.7% (higher than 99.7% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. Priority 29.5 of 100.</description><category>public-exploit</category></item></channel></rss>