NETGEAR security advisories, June 2026

Every NETGEAR security advisory published in June 2026, from NETGEAR Security Advisories (kb.netgear.com) via NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 10
Critical: 0
High: 0
In CISA KEV: 0
CVEs: 10

NETGEAR advisories published in June 2026

Jun 9, 2026
Medium [CVE-2026-9212] Insufficient authentication and input validation in certain NETGEAR products
Medium5.6
Jun 9, 2026
Medium [CVE-2026-9210] Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality
Medium4.9
Jun 9, 2026
Medium [CVE-2026-0420] improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attacker-in-the-middle (MiTM) style attacks impacting the product's confidentiality
Medium4.6
Jun 9, 2026
Medium [CVE-2026-0419] Insufficient input validation in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows users connected to the local WiFi Networks to execute operating system commands
Medium4.4
Jun 9, 2026
Medium [CVE-2026-0417] Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the router's integrity
Medium4.3
Jun 9, 2026
Medium [CVE-2026-0416] insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated administrator with local network access to submit crafted input that bypasses intended management interface restrictions, resulting in unauthorized modification of protected router software or functionality
Medium4.3
Jun 9, 2026
Medium [CVE-2026-0413] buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality
Medium4.3
Jun 9, 2026
Medium [CVE-2026-0412] Insufficient input validation vulnerability in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows administrators connected to the local network to make unauthorized modification of router software and functionality
Medium4.3
Jun 9, 2026
Medium [CVE-2026-0411] information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to gain administrator access to the Orbi router
Medium4.2
Jun 9, 2026
Medium [CVE-2026-0409] Orbi: NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the router and the Internet to run commands on your device when the device administrator performs certain specific management actions
Medium4.8

Get an email when NETGEAR publishes the next one.

See NETGEAR's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about NETGEAR

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.