Approved changes feed: RSS · Atom

cpe:2.3:a:netgear:xr500:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetgear (99700297-c207-56f4-abd0-97ab0c8bf3ab)
ProductXr500 (34b4c7d9-9b0f-54db-9ad8-5c72dc6aa6d4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-9212 vulnerable 2026-07-29 01:09:06.901937 Insufficient authentication and input validation in certain NETGEAR products
Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.
Published: 2026-06-09T15:50:53.044Z
Updated: 2026-06-11T05:03:05.236Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25246 vulnerable 2026-06-08 07:12:50.886806 Details available
HIGH (8.1)
NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users.
Published: 2025-02-05T00:00:00.000Z
Updated: 2025-02-12T20:51:31.641Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.