Medium · published September 8, 2026
A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.
| Product | Versions | Fixed in |
|---|---|---|
| netgear/xr1000_firmware | < 1.1.0.22 | 1.1.0.22 |
| netgear/xr1000v2_firmware | < 1.1.0.22 | 1.1.0.22 |
| netgear/xr500_firmware | < 2.3.5.152 | 2.3.5.152 |