Vulnerabilities (CVE)

Filtered by vendor Netgear Subscribe
Filtered by product Xr1000v2 Firmware
Total 6 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-9215 1 Netgear 6 Xr1000, Xr1000 Firmware, Xr1000v2 and 3 more 2026-09-11 N/A 6.7 MEDIUM
A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.
CVE-2026-11739 1 Netgear 54 Mr60, Mr60 Firmware, Mr70 and 51 more 2026-09-09 N/A 6.4 MEDIUM
A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device.
CVE-2026-11736 1 Netgear 38 Rax20, Rax20 Firmware, Rax35v2 and 35 more 2026-09-09 N/A 4.9 MEDIUM
A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality.
CVE-2026-11735 1 Netgear 40 R7000, R7000 Firmware, Rax20 and 37 more 2026-09-09 N/A 4.9 MEDIUM
A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.
CVE-2026-0410 1 Netgear 38 R7000, R7000 Firmware, Rax20 and 35 more 2026-07-23 N/A 4.5 MEDIUM
Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality.
CVE-2026-0406 1 Netgear 2 Xr1000v2, Xr1000v2 Firmware 2026-06-17 N/A 8.0 HIGH
An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injections.