Xr1000v2 (Netgear) - vulnerabilities (CVEs)
4 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2026-09-08. Vendor: Netgear.
CVEs of Xr1000v2
- CVE-2026-9215 - CVSS 6.7 (medium), 2026-09-08: A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router…
- CVE-2026-11736 - CVSS 4.9 (medium), 2026-08-11: A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router…
- CVE-2026-11735 - CVSS 4.9 (medium), 2026-08-11: A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the…
- CVE-2026-11739 - CVSS 6.4 (medium), 2026-08-11: A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify…
- CVE-2026-0410 - CVSS 4.5 (medium), 2026-06-09: Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and…
- CVE-2026-0406 - CVSS 8 (high), 2026-01-13: An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injections.
- CVE-2025-25246 - CVSS 8.1 (high), 2025-02-05: NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users.
