Skip to content
Exploit Radar Choose my productsProducts My radar
English

Products › Brands

Brand

NETGEAR: actively exploited vulnerabilities

8 vulnerabilities in NETGEAR products (Routers (DGN, WNR, Nighthawk), Switches (GS, JGS, MS), Wi-Fi access points (WAC, WNAP)) are in CISA’s catalog of exploited vulnerabilities. Last added: September 8, 2022.

NETGEAR security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one NETGEAR category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Routers (DGN, WNR, Nighthawk) 6 vulnerabilities · Home routers and IoT
  • Switches (GS, JGS, MS) 1 vulnerability · Switches and routers
  • Wi-Fi access points (WAC, WNAP) 1 vulnerability · Home routers and IoT

Name used by CISA: NETGEAR. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this NETGEAR list.

  1. Rank 1NETGEAR Routers (DGN, WNR, Nighthawk)

    CVE-2017-6862

    CVE from 2017, added in 2022

    NETGEAR Multiple Devices Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 8, 2022
    CISA deadline
    14 days
    CVSS severity
    9.8 (critical)

  2. Rank 2NETGEAR Routers (DGN, WNR, Nighthawk)

    CVE-2016-10174

    CVE from 2016, added in 2022

    NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 25, 2022
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  3. Rank 3NETGEAR Wi-Fi access points (WAC, WNAP)

    CVE-2016-1555

    CVE from 2016, added in 2022

    NETGEAR Multiple WAP Devices Command Injection Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 25, 2022
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  4. Rank 4NETGEAR Routers (DGN, WNR, Nighthawk)

    CVE-2017-6077

    CVE from 2017, added in 2022

    NETGEAR DGN2200 Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 7, 2022
    CISA deadline
    184 days
    CVSS severity
    9.8 (critical)

  5. Rank 5NETGEAR Switches (GS, JGS, MS)

    CVE-2020-26919

    Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    9.8 (critical)

  6. Rank 6NETGEAR Routers (DGN, WNR, Nighthawk)

    CVE-2016-6277

    CVE from 2016, added in 2022

    NETGEAR Multiple Routers Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 7, 2022
    CISA deadline
    184 days
    CVSS severity
    8.8 (high)

  7. Rank 7NETGEAR Routers (DGN, WNR, Nighthawk)

    CVE-2017-5521

    CVE from 2017, added in 2022

    NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 8, 2022
    CISA deadline
    21 days
    CVSS severity
    8.1 (high)

End of life: remove

These products are no longer supported: no patch is coming. Remove them or isolate them from the network.

  1. NETGEAR Routers (DGN, WNR, Nighthawk)

    CVE-2017-6334

    End of lifeCVE from 2017, added in 2022

    NETGEAR DGN2200 Devices OS Command Injection Vulnerability

    End-of-life product: no patch is coming; remove or isolate it.

    Added
    Mar 25, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

Follow and verify

Get new NETGEAR vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.