CVE-2025-25246

No fix known EPSS <1%CVSS 8.1

NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users.

Published 2025-02-05 · CVE record · OSV

Products: NETGEAR XR1000, NETGEAR XR1000v2, NETGEAR XR500