CVE Feed

    Dashboard / CVE / CVE-2025-25246

    CVE-2025-25246

    NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users.

    Published:Feb 5, 2025
    Last Modified:Apr 15, 2026
    EPS:Feb 5, 2025
    EPSS Score:0.04978
    CVSS Score:8.1

    Affected Products

    Vendor
    Netgear
    Product
    Xr1000
    Vendor
    Netgear
    Product
    Xr500

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-9215 (CVSS 1.8) — A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leve…
    CVE-2026-11736 (CVSS 1.9) — A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin use…
    CVE-2026-11735 (CVSS 1.9) — A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin …
    CVE-2026-11739 (CVSS 4.9) — A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent att…
    CVE-2026-62657 (CVSS 4.9) — A security flaw in the router's certificate validation process was discovered in the NETGEAR XR1000 Gaming Rou…
    CVE-2026-0418 (CVSS 4.3) — Insufficient configuration management in the listed devices allows authenticated administrators connected to t…
    CVE-2026-0417 (CVSS 4.3) — Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators …
    CVE-2026-9210 (CVSS 4.9) — Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators c…
    CVE-2026-9213 (CVSS 6.9) — A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamp…
    CVE-2026-0410 (CVSS 1.9) — Authenticated administrators connected to the local network can gain elevated access to the router and make u…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High