Cyberfeed6 › Vendors › NETGEAR
CISA lists 8 NETGEAR vulnerabilities as exploited in real attacks. Most entries concern Multiple Devices, DGN2200 Devices, Wireless Access Point (WAP) Devices, WNR2000v5 Router.
Showing the 8 most recently added of 8. Check the vendor notice before you act: it names the fixed versions.
| Vulnerability | Product | Added to list | Severity | Ransomware | Fix |
|---|---|---|---|---|---|
| CVE-2017-5521NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability | Multiple Devices | 2022-09-08 | High (8.1) | No | Vendor notice |
| CVE-2017-6862NETGEAR Multiple Devices Buffer Overflow Vulnerability | Multiple Devices | 2022-06-08 | Critical (9.8) | No | |
| CVE-2017-6334NETGEAR DGN2200 Devices OS Command Injection Vulnerability | DGN2200 Devices | 2022-03-25 | High (8.8) | No | |
| CVE-2016-1555NETGEAR Multiple WAP Devices Command Injection Vulnerability | Wireless Access Point (WAP) Devices | 2022-03-25 | Critical (9.8) | No | |
| CVE-2016-10174NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability | WNR2000v5 Router | 2022-03-25 | Critical (9.8) | No | |
| CVE-2017-6077NETGEAR DGN2200 Remote Code Execution Vulnerability | Wireless Router DGN2200 | 2022-03-07 | Critical (9.8) | No | |
| CVE-2016-6277NETGEAR Multiple Routers Remote Code Execution Vulnerability | Multiple Routers | 2022-03-07 | High (8.8) | No | |
| CVE-2020-26919Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability | JGS516PE Devices | 2021-11-03 | Critical (9.8) | No |
Source: CISA Known Exploited Vulnerabilities catalog, released 2026-11-04. Severity scores are CVSS where available. "Ransomware" means CISA has marked the flaw as known to be used in ransomware campaigns.