netgear xr1000 firmware

Name: netgear xr1000 firmware
Brand: netgear

productUS

cpe:2.3:o:netgear:xr1000_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

8critical6high13medium0low

updated 2026-10-28

vulnerabilities (30)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-35517US	high7.2	15.0% (97th)	—	no fix	2024-10-11	= 1.0.0.64
CVE-2026-11739US	medium6.4	2.55% (85th)	—	1.1.0.22	2026-08-11	< 1.1.0.22
CVE-2021-45612US	critical9.8	2.49% (85th)	—	1.0.0.58	2021-12-26	< 1.0.0.58
CVE-2021-45622US	critical9.8	2.37% (84th)	—	1.0.0.58	2021-12-26	< 1.0.0.58
CVE-2021-45621US	critical9.8	2.02% (81st)	—	1.0.0.58	2021-12-26	< 1.0.0.58
CVE-2021-45620US	critical9.8	2.02% (81st)	—	1.0.0.58	2021-12-26	< 1.0.0.58
CVE-2021-45616US	critical9.8	2.02% (81st)	—	1.0.0.58	2021-12-26	< 1.0.0.58
CVE-2021-45614US	critical9.8	2.02% (81st)	—	1.0.0.58	2021-12-26	< 1.0.0.58
CVE-2021-45613US	critical9.8	2.02% (81st)	—	1.0.0.58	2021-12-26	< 1.0.0.58
CVE-2021-45654US	high7.5	1.08% (65th)	—	1.0.0.58	2021-12-26	< 1.0.0.58
CVE-2021-45522US	high8.8OT elevated	0.88% (59th)	—	1.0.0.58	2021-12-26	< 1.0.0.58
CVE-2021-45513US	critical9.6	0.82% (57th)	—	1.0.0.58	2021-12-26	< 1.0.0.58
CVE-2021-45514US	high8.8	0.82% (57th)	—	1.0.0.58	2021-12-26	< 1.0.0.58
CVE-2026-11736US	medium4.9	0.77% (55th)	—	1.1.0.22	2026-08-11	< 1.1.0.22
CVE-2026-11735US	medium4.9	0.77% (55th)	—	1.1.0.22	2026-08-11	< 1.1.0.22
CVE-2021-45549US	medium6.8	0.63% (50th)	—	1.0.0.58	2021-12-26	< 1.0.0.58
CVE-2021-34982US	—	0.58% (47th)	—	1.0.0.64	2024-05-07	< 1.0.0.64
CVE-2021-45510US	high8.8	0.53% (45th)	—	1.0.0.58	2021-12-26	< 1.0.0.58
CVE-2021-45643US	medium6.5	0.50% (42nd)	—	1.0.0.58	2021-12-26	< 1.0.0.58
CVE-2021-45519US	medium6.5	0.46% (40th)	—	1.0.0.58	2021-12-26	< 1.0.0.58
CVE-2026-9213US	high8.1	0.40% (34th)	—	1.0.2.86	2026-06-09	< 1.0.2.86
CVE-2021-45518US	medium6.5	0.38% (32nd)	—	1.0.0.58	2021-12-26	< 1.0.0.58
CVE-2021-45517US	medium6.5	0.38% (32nd)	—	1.0.0.58	2021-12-26	< 1.0.0.58
CVE-2021-45604US	medium4.5	0.38% (32nd)	—	1.0.0.58	2021-12-26	< 1.0.0.58
CVE-2021-34983US	—OT elevated	0.33% (26th)	—	1.0.0.64	2024-05-07	< 1.0.0.64
CVE-2026-0418US	medium4.5	0.24% (16th)	—	1.0.0.68	2026-06-09	< 1.0.0.68
CVE-2026-0417US	medium4.5	0.23% (14th)	—	1.0.0.68	2026-06-09	< 1.0.0.68
CVE-2026-0410US	medium4.5	0.22% (12th)	—	1.1.0.22	2026-06-09	< 1.1.0.22
CVE-2026-9210US	medium4.5	0.22% (12th)	—	1.0.0.68	2026-06-09	< 1.0.0.68
CVE-2026-9215US	—	0.19% (9th)	—	1.1.0.22	2026-09-08	< 1.1.0.22

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')11 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-404Improper Resource Shutdown or Release3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-15External Control of System or Configuration Setting1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE30 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan