Netgear Xr1000V2 vulnerabilities
7 vulnerabilities
Known vulnerabilities in Netgear Xr1000V2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-25246netgearxr1000_firmware+2
EPSS score0.69%
NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users.CVE-2026-11736netgearrax20_firmware+18EPSS score0.51%
A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality.CVE-2026-11735netgearr7000+19EPSS score0.51%
A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.CVE-2026-11739netgearmr60_firmware+26EPSS score1.07%
A command injection vulnerability in certain affected NETGEAR Nighthawk
devices allows a network-adjacent attacker with the ability to intercept
and modify local network traffic (attacker in the middle) to compromise
the confidentiality and integrity of the affected device.CVE-2026-0410netgearr7000+19EPSS score0.22%
Authenticated administrators connected to the local network can gain
elevated access to the router and make unauthorized changes to router
software and functionality.CVE-2026-0406netgearxr1000v2_firmwareEPSS score0.25%
An insufficient input validation vulnerability in the NETGEAR XR1000v2
allows attackers connected to the router's LAN to execute OS command
injections.CVE-2026-9215netgearxr1000_firmware+2EPSS score0.19%
A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.