Xr1000 firmware

This hub aggregates every CVE we track for Xr1000 firmware, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Xr1000 firmware.

• CVE-2026-9215A CSRF vulnerability exists in certain NETGEAR XR series devices6.7Sep 8, 2026
• CVE-2026-11736Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers4.9Aug 11, 2026
• CVE-2026-11735Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models4.9Aug 11, 2026
• CVE-2026-11739Command injection vulnerability in some NETGEAR Nighthawk devices6.4Aug 11, 2026
• CVE-2026-0418Certain NETGEAR devices allow administrators to tamper with system4.5Jun 9, 2026
• CVE-2026-0417Insufficient input validation in certain NETGEAR routers4.5Jun 9, 2026
• CVE-2026-9210Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router4.5Jun 9, 2026
• CVE-2026-9213Insufficient input validation in certain NETGEAR routers8.1Jun 9, 2026
• CVE-2026-0410Insufficient input validation in certain NETGEAR routers4.5Jun 9, 2026
• CVE-2024-35517Netgear XR1000 v1.0.0.64 is vulnerable to command injection in usb_remote_smb_conf.cgi via the share_name parameter.8.4Oct 11, 2024
• CVE-2021-34983NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability6.5May 7, 2024
• CVE-2021-34982NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability8.8May 7, 2024
• CVE-2021-45510NETGEAR XR1000 devices before 1.0.0.58 are affected by authentication bypass.8.2Dec 26, 2021
• CVE-2021-45513NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker.9.6Dec 26, 2021
• CVE-2021-45514NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker.9.6Dec 26, 2021