Login Request a demo
RF
Product
R6400v2 Firmware
by Netgear · last CVE Jun 9, 2026
49
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities49In the news0Timeline
Severity mix
Critical 13High 15Medium 21Low 0
Severity
All severities49Critical13High15Medium21Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add R6400v2 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-34982
8.8
1%
May 7
NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability
Affected: before 1.0.4.120
CVE-2021-45641
8.8
1%
Dec 26
Certain NETGEAR devices are affected by incorrect configuration of security settings
Affected: before 1.0.2.66
CVE-2021-45607
8.8
1%
Dec 26
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user
Affected: before 1.0.4.118
CVE-2021-45606
8.8
1%
Dec 26
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user
Affected: before 1.0.4.118
CVE-2021-45525
8.8
1%
Dec 26
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user
Affected: before 1.0.4.118
CVE-2021-34991
8.8
6%
Nov 15
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers
Affected: before 1.0.4.120
CVE-2020-28373
8.8
1%
Nov 9
upnpd on certain NETGEAR devices allows remote (LAN) attackers to execute arbitrary code via a stack-based buffer overflow
Affected: 1.0.4.102_10.0.75
CVE-2021-40847
8.1
10%
Sep 21
The update process of the Circle Parental Control Service on various NETGEAR routers allows remote attackers to achieve remote code execution as root via a MitM attack
Affected: 1.0.4.106
CVE-2024-52022
8.0
1%
Nov 5
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component wlg_adv.cgi via…
Affected: 1.0.4.128
CVE-2024-51021
8.0
1%
Nov 5
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a command injection vulnerability via the wan_gateway parameter at genie_fix2.cgi
Affected: 1.0.4.128
CVE-2024-51010
8.0
1%
Nov 5
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component ap_mode.cgi via…
Affected: 1.0.4.128
CVE-2020-35798
7.8
1%
Dec 30
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker
Affected: before 1.0.4.84
CVE-2021-45650
7.5
1%
Dec 26
Certain NETGEAR devices are affected by disclosure of sensitive information
Affected: before 1.0.4.102
CVE-2021-45640
7.2
1%
Dec 26
Certain NETGEAR devices are affected by incorrect configuration of security settings
Affected: before 1.0.2.66
CVE-2021-38519
7.2
1%
Aug 11
Certain NETGEAR devices are affected by command injection by an authenticated user
Affected: before 1.0.2.66
Showing 15