Description
A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NETGEAR | XR1000v2 | < V1.1.0.22 | V1.1.0.22 |
| NETGEAR | XR500 | < v2.3.5.152 | v2.3.5.152 |
References
- https://www.netgear.com/support/product/xr500 product patch
- https://www.netgear.com/support/product/xr1000 product patch
- https://www.netgear.com/support/product/xr1000v2 product patch
- https://kb.netgear.com/000070912/September-2026-NETGEAR-Security-Advisory vendor-advisory patch