NETGEAR Xr1000v2
6 CVEs affecting NETGEAR Xr1000v2. Latest disclosed: 2026-08-11. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-25246 | High | 8.1 | 2025-02-05 | NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users. |
CVE-2026-0406 | High | 8.0 | 2026-01-13 | An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injections. |
CVE-2026-0410 | Medium | 4.5 | 2026-06-09 | Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and funct… |
CVE-2026-11739 | | 2026-08-11 | A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify l… | |
CVE-2026-11736 | | 2026-08-11 | A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router sof… | |
CVE-2026-11735 | | 2026-08-11 | A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the rou… |