CVE-2026-9215

Published: Sep 8, 2026Modified: Sep 8, 2026

6.4

Vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H

Exploitability: 1.2 / Impact: 5.2

Source: a2826606-91e7-4eb6-899e-8484bd4575d5 (Secondary)

Description

A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.

Related CWEs

CWE-352

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (3)

https://www.netgear.com/support/product/xr1000

Source: a2826606-91e7-4eb6-899e-8484bd4575d5

https://www.netgear.com/support/product/xr1000v2

Source: a2826606-91e7-4eb6-899e-8484bd4575d5

https://www.netgear.com/support/product/xr500

Source: a2826606-91e7-4eb6-899e-8484bd4575d5

Timeline

No history available yet.