NETGEAR XR500

• CVE-2026-9215 Medium 6.7 A CSRF vulnerability exists in certain NETGEAR XR series devices 0.2%
• CVE-2026-9212 Medium 5.6 Insufficient authentication and input validation in certain NETGEAR products 0.3%
• CVE-2025-25246 High 8.1 NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users. 0.7%