GCVE - cpe:2.3:o:netgear:xr1000v2_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:netgear:xr1000v2_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-9215`	vulnerable	2026-11-03 10:16:09.776610	A CSRF vulnerability exists in certain NETGEAR XR series devices MEDIUM (6.7) A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability. Published: 2026-09-08T17:06:47.865Z Updated: 2026-10-13T16:33:16.019Z Open on db.gcve.eu Reference links https://www.netgear.com/support/product/xr500 https://www.netgear.com/support/product/xr1000 https://www.netgear.com/support/product/xr1000v2 https://kb.netgear.com/000070912/September-2026-NETGEAR-Security-Advisory	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-0406`	vulnerable	2026-06-08 07:47:12.207075	Insufficient input validation in NETGEAR Nighthawk router XR1000v2 An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injections. Published: 2026-01-13T16:00:59.458Z Updated: 2026-02-26T15:04:44.409Z Open on db.gcve.eu Reference links https://www.netgear.com/support/product/xr1000v2 https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.