NETGEAR XR500 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting NETGEAR XR500: 2 record(s), with affected versions and fixes.
CVE-2026-9215
Medium · 6.7
CWE-352 Sep 8, 2026
A CSRF vulnerability exists in certain NETGEAR XR series devices
A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.
CVE-2026-9212
High · 8.0
CWE-20 Jun 9, 2026
Insufficient authentication and input validation in certain NETGEAR products
Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.