NETGEAR RBR350 Firmware vulnerabilities

9 CVEs affecting NETGEAR RBR350 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-9212, published 2026-06-09.

More from NETGEAR.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-45619, published 2021-12-26. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects EX6200v2 before 1.0.1.86, EX6250 before 1.0.0.134, EX7700 before 1.0.0.216, EX8000 before…
• CVE-2021-45653, published 2021-12-26. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10.
• CVE-2021-45652, published 2021-12-26. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10.
• CVE-2021-45648, published 2021-12-26. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EX6100v2 before 1.0.1.106, EX6150v2 before 1.0.1.106, EX6250 before 1.0.0.146, EX6400 before 1.0.2.164,…
• CVE-2026-9212, published 2026-06-09. High severity, CVSS 8.0. EPSS: 0.5% chance of exploitation in the next 30 days. Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain…
• CVE-2021-45520, published 2021-12-26. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10.
• CVE-2021-45494, published 2021-12-26. Medium severity, CVSS 4.5. EPSS: 0.4% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10.
• CVE-2021-45521, published 2021-12-26. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10.
• CVE-2026-0411, published 2026-06-09. High severity, CVSS 8.0. EPSS: 0.3% chance of exploitation in the next 30 days. An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to gain administrator access to the Orbi router. The listed…