CVE-2019-20759: NETGEAR r9000 Firmware

Medium severity, CVSS 5.2. EPSS: 0.5% chance of exploitation in the next 30 days.

NETGEAR R9000 devices before 1.0.4.26 are affected by stored XSS.

Affected products

• NETGEAR r9000 Firmware: before 1.0.4.26 (fixed in 1.0.4.26)

Published 2020-04-16. Last modified 2026-06-17.