Netgear Nighthawk AC Series

What this means for you

The top 3 risks, most serious first.

1. Serious

   Older hardware gets fewer security fixes

   Most Netgear AC-series models are end-of-life or receiving only minimal security patches. Each unpatched CVE is a permanent vulnerability on EOL hardware.

   Do this: Check Netgear's EOL page to verify if your specific AC model still receives security updates
2. Moderate

   Security fixes have been slow to arrive

   Netgear AC-series routers have an extensive CVE history. Patch deployment required public researcher pressure on several occasions.

   Source: Multiple CERT disclosures · 2019–2023 ↗
3. Minor

   Its advanced protection costs extra

   Netgear Armor (Bitdefender-powered) is required for threat detection on Nighthawk hardware. Without it, only standard NAT firewall protection is active.

   Source: Netgear Armor · ~$100/yr ↗

Protections it’s missing

Missing 5 of 8. Has 3 only partly.

We check every router for the same 8 protections. Here is how the Netgear Nighthawk AC Series does.

• Blocks unknown devices from joining

  Missing

  New devices stay out until you approve them once, even if they have the Wi-Fi password.

  Zero-Trust Device Admission

• Encrypts internet traffic for every device

  Missing

  Traffic leaving your home is encrypted, even from devices that can’t run a VPN app.

  Router-Level VPN

• Locks a device to approved sites

  Missing

  A device can reach only the sites you approve. Everything else is blocked.

  Domain Allowlisting

• Guest access that expires

  Missing

  Guests are removed when they leave and need your approval to reconnect.

  Guest Auto-Expiry

• Made outside China’s legal reach

  Missing

  Not subject to China’s National Intelligence Law.

  Clean Supply Chain

• Keeps smart gadgets away from your computers

  Partly

  Devices are kept apart, so a hacked smart TV can’t reach your laptop.

  Network Segmentation (VLANs)

• Separate Wi-Fi passwords per group

  Partly

  Each part of your network gets its own password.

  Granular Password Control

• Watches for attacks in real time

  Partly

  Spots suspicious devices, traffic and known attacks as they happen.

  Active Threat Monitoring

Fix it today

1. 1
   Check Netgear's EOL page to verify if your specific AC model still receives security updates

   Why: Older hardware gets fewer security fixes.
2. 2
   Apply any available firmware updates
3. 3
   Consider upgrading to a current-generation Wi-Fi 6 router in active support
4. 4
   Disable remote management if not actively using it

Other Netgear models