Cross Site Request Forgery in NETGEAR Routers
CVE-2026-9215

1.8LOW

Key Information:

Vendor

Netgear
Status
Xr1000
Xr1000v2
Xr500
Vendor
CVE Published:
8 September 2026

What is CVE-2026-9215?

A cross site request forgery (CSRF) vulnerability exists in specific NETGEAR router models, enabling attackers to exploit social engineering techniques to manipulate router configurations. This could disrupt operations with the router administrator's direct involvement. While confidentiality remains unaffected, the potential for significant disruption poses a noteworthy risk to network integrity.

Affected Version(s)

XR1000 0

XR1000v2 0

XR500 0

References

https://www.netgear.com/support/product/xr500
productpatch
https://www.netgear.com/support/product/xr1000
productpatch
https://www.netgear.com/support/product/xr1000v2
productpatch

CVSS V4

Score:
1.8
Severity:
LOW
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

mornaner
.