Approved changes feed: RSS · Atom

cpe:2.3:a:netgear:xr500:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetgear (99700297-c207-56f4-abd0-97ab0c8bf3ab)
ProductXr500 (34b4c7d9-9b0f-54db-9ad8-5c72dc6aa6d4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-9215 vulnerable 2026-11-03 10:16:09.773630 A CSRF vulnerability exists in certain NETGEAR XR series devices
MEDIUM (6.7)
A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.
Published: 2026-09-08T17:06:47.865Z
Updated: 2026-10-13T16:33:16.019Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9212 vulnerable 2026-07-29 01:09:06.901937 Insufficient authentication and input validation in certain NETGEAR products
Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.
Published: 2026-06-09T15:50:53.044Z
Updated: 2026-11-04T17:34:33.879Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25246 vulnerable 2026-06-08 07:12:50.886806 Details available
HIGH (8.1)
NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users.
Published: 2025-02-05T00:00:00.000Z
Updated: 2025-02-12T20:51:31.641Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.