NETGEAR XR1000 vulnerabilities

3 CVEs affecting NETGEAR XR1000, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-62657, published 2026-07-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-34870, published 2022-01-25. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR XR1000 1.0.0.52_1.0.38 routers. Authentication is not required to exploit…
CVE-2025-25246, published 2025-02-05. High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days. NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users.
CVE-2026-62657, published 2026-07-14. Medium severity, CVSS 4.9. EPSS: 0.2% chance of exploitation in the next 30 days. A security flaw in the router's certificate validation process was discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely…