Netgear XR1000

Name: Netgear XR1000
Brand: Netgear

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

8critical6high14medium0low

updated 2026-10-28

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-35517US	high7.2	15.0% (97th)	—	no fix	2024-10-11	≤ 1.0.0.72
CVE-2026-11739US	medium6.4	2.55% (85th)	—	V1.1.0.22	2026-08-11	0 → V1.1.0.22
CVE-2021-45612US	critical9.8	2.49% (85th)	—	no fix	2021-12-26	≤ 1.0.0.58
CVE-2021-45622US	critical9.8	2.37% (84th)	—	no fix	2021-12-26	≤ 1.0.0.58
CVE-2021-45621US	critical9.8	2.02% (81st)	—	no fix	2021-12-26	≤ 1.0.0.58
CVE-2021-45620US	critical9.8	2.02% (81st)	—	no fix	2021-12-26	≤ 1.0.0.58
CVE-2021-45616US	critical9.8	2.02% (81st)	—	no fix	2021-12-26	≤ 1.0.0.58
CVE-2021-45614US	critical9.8	2.02% (81st)	—	no fix	2021-12-26	≤ 1.0.0.58
CVE-2021-45613US	critical9.8	2.02% (81st)	—	no fix	2021-12-26	≤ 1.0.0.58
CVE-2021-45654US	high7.5	1.08% (65th)	—	no fix	2021-12-26	≤ 1.0.0.58
CVE-2021-34870US	medium6.5OT elevated	0.90% (59th)	—	no fix	2022-01-25	≤ 1.0.0.52_1.0.38
CVE-2021-45522US	high8.8OT elevated	0.88% (59th)	—	no fix	2021-12-26	≤ 1.0.0.58
CVE-2021-45513US	critical9.6	0.82% (57th)	—	no fix	2021-12-26	≤ 1.0.0.58
CVE-2021-45514US	high8.8	0.82% (57th)	—	no fix	2021-12-26	≤ 1.0.0.58
CVE-2026-11736US	medium4.9	0.77% (55th)	—	V1.1.0.22	2026-08-11	0 → V1.1.0.22
CVE-2026-11735US	medium4.9	0.77% (55th)	—	V1.1.0.22	2026-08-11	0 → V1.1.0.22
CVE-2025-25246US	—	0.69% (53rd)	—	no fix	2025-02-05	≤ 1.0.0.74
CVE-2021-45549US	medium6.8	0.63% (50th)	—	no fix	2021-12-26	≤ 1.0.0.58
CVE-2021-45510US	high8.8	0.53% (45th)	—	no fix	2021-12-26	≤ 1.0.0.58
CVE-2021-45643US	medium6.5	0.50% (42nd)	—	no fix	2021-12-26	≤ 1.0.0.58
CVE-2021-45519US	medium6.5	0.46% (39th)	—	no fix	2021-12-26	≤ 1.0.0.58
CVE-2026-9213US	high8.1	0.40% (34th)	—	V1.0.2.86	2026-06-09	0 → V1.0.2.86
CVE-2021-45518US	medium6.5	0.38% (32nd)	—	no fix	2021-12-26	≤ 1.0.0.58
CVE-2021-45517US	medium6.5	0.38% (32nd)	—	no fix	2021-12-26	≤ 1.0.0.58
CVE-2021-45604US	medium4.5	0.38% (32nd)	—	no fix	2021-12-26	≤ 1.0.0.58
CVE-2026-0418US	medium4.5	0.24% (16th)	—	v1.0.0.68	2026-06-09	0 → v1.0.0.68
CVE-2026-0417US	medium4.5	0.23% (14th)	—	V1.0.0.68	2026-06-09	0 → V1.0.0.68
CVE-2026-0410US	medium4.5	0.22% (12th)	—	V1.1.0.22	2026-06-09	0 → V1.1.0.22
CVE-2026-9210US	medium4.5	0.22% (12th)	—	V1.0.0.68	2026-06-09	0 → V1.0.0.68
CVE-2026-62657US	—	0.15% (4th)	—	V1.0.2.86	2026-07-14	0 → V1.0.2.86

showing 30 of 33

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')11 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-404Improper Resource Shutdown or Release3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-15External Control of System or Configuration Setting1 CVEs
CWE-259Use of Hard-coded Password1 CVEs

sources (2)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)20 CVEs
EUEU Vulnerability Database (ENISA)10 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan