Xr1000 (Netgear) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2026-08-11. Vendor: Netgear.
CVEs of Xr1000
- CVE-2026-11736 - CVSS 4.9 (medium), 2026-08-11: A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router…
- CVE-2026-11735 - CVSS 4.9 (medium), 2026-08-11: A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the…
- CVE-2026-11739 - CVSS 6.4 (medium), 2026-08-11: A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify…
- CVE-2026-62657 - CVSS 4.9 (medium), 2026-07-14: A security flaw in the router's certificate validation process was discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could…
- CVE-2026-9213 - CVSS 8.1 (high), 2026-06-09: A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamper with traffic between the router and the…
- CVE-2026-9210 - CVSS 4.9 (medium), 2026-06-09: Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make…
- CVE-2026-0417 - CVSS 4.5 (medium), 2026-06-09: Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with…
- CVE-2026-0418 - CVSS 4.5 (medium), 2026-06-09: Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.
- CVE-2026-0410 - CVSS 4.5 (medium), 2026-06-09: Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and…
- CVE-2025-25246 - CVSS 8.1 (high), 2025-02-05: NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users.
- CVE-2024-35517 - CVSS 8.4 (high), 2024-10-11: Netgear XR1000 v1.0.0.64 is vulnerable to command injection in usb_remote_smb_conf.cgi via the share_name parameter.
- CVE-2021-34870 - CVSS 6.5 (medium), 2022-01-25: This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR XR1000 1.0.0.52_1.0.38 routers.…
