Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-52080

No fix known EPSS <1%CVSS 6.5

In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow vulnerability exists in the HTTPD service through the usb_device.cgi endpoint. The vulnerability occurs when processing POST requests containing the share_name parameter.

Published 2025-07-15 · CVE record · OSV

Products: netgear xr300_firmware