CVE-2021-31802

NETGEAR R7000 1.0.11.116 devices have a heap-based Buffer Overflow that is exploitable from the local network without authentication. The vulnerability exists within the handling of an HTTP request. An attacker can leverage this to execute code as root. The problem is that a user-provided length value is trusted during a backup.cgi file upload. The attacker must add a \n before the Content-Length header.

• CWE-787

• https://ssd-disclosure.com/ssd-advisory-netgear-nighthawk-r7000-httpd-preauth-rce/Exploit, Third Party Advisory
• https://www.netgear.com/about/security/Vendor Advisory
• https://ssd-disclosure.com/ssd-advisory-netgear-nighthawk-r7000-httpd-preauth-rce/Exploit, Third Party Advisory
• https://www.netgear.com/about/security/Vendor Advisory

Published

Apr 26, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-31795The PowerVR GPU kernel driver in pvrsrvkm.ko through 2021-04…7
• CVE-2021-31796An inadequate encryption vulnerability discovered in CyberAr…7.5
• CVE-2021-31797The user identification mechanism used by CyberArk Credentia…5.1
• CVE-2021-31798The effective key space used to encrypt the cache in CyberAr…4.4
• CVE-2021-31799In RDoc 3.11 through 6.x before 6.3.1, as distributed with R…7
• CVE-2021-31800Multiple path traversal vulnerabilities exist in smbserver.p…9.8
• CVE-2021-31803cPanel before 94.0.3 allows self-XSS via EasyApache 4 Save P…6.1
• CVE-2021-31804LeoCAD before 21.03 sometimes allows a use-after-free during…5.5
• CVE-2021-31805The fix issued for CVE-2020-17530 was incomplete. So from Ap…9.8
• CVE-2021-31806An issue was discovered in Squid before 4.15 and 5.x before …6.5
• CVE-2021-31807An issue was discovered in Squid before 4.15 and 5.x before …6.5
• CVE-2021-31808An issue was discovered in Squid before 4.15 and 5.x before …6.5