Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-44650

No fix known EPSS <1%CVSS 7.5

In Netgear R7000 V1.3.1.64_10.1.36 and EAX80 V1.0.1.70_1.0.2, the USERLIMIT_GLOBAL option is set to 0 in the bftpd.conf configuration file. This can cause DoS attacks when unlimited users are connected.

Published 2025-07-21 · CVE record · OSV

Products: netgear r7000_firmware, netgear eax80_firmware