Netgear Rax10 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Netgear Rax10 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2021-45619 — CVSS 9.6 (critical): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects EX6200v2 before 1.0.1.86, EX6250…
• CVE-2021-34947 — CVSS 8.8 (high): NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to…
• CVE-2026-9212 — CVSS 8.0 (high): Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute…
• CVE-2026-11814 — CVSS 6.8 (medium): A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify…
• CVE-2021-45602 — CVSS 6.1 (medium): Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.66, EX2700 before…
• CVE-2021-45603 — CVSS 6.1 (medium): Certain NETGEAR devices are affected by disclosure of sensitive information. A UPnP request reveals a device's serial number, which can be…
• CVE-2026-11738 — CVSS 4.4 (medium): Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network…