Medium severity6.7NVD Advisory· Published Sep 8, 2026· Updated Oct 13, 2026

CVE-2026-9215

Description

A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgear/Netgear Router Firmwareinferred
Netgear/Xr1000 Firmware
cpe:2.3:o:netgear:xr1000_firmware:*:*:*:*:*:*:*:*
Range: <1.1.0.22
Netgear/Xr1000v2 Firmware
cpe:2.3:o:netgear:xr1000v2_firmware:*:*:*:*:*:*:*:*
Range: <1.1.0.22
Netgear/Xr500 Firmware
cpe:2.3:o:netgear:xr500_firmware:*:*:*:*:*:*:*:*
Range: <2.3.5.152
Netgear/XR1000llm-fuzzy
Netgear/NETGEARllm-fuzzy
Netgear/XR1000v2llm-fuzzy
Netgear/Xr500llm-fuzzy

Patches

Vulnerability mechanics

References

kb.netgear.com/000070912/September-2026-NETGEAR-Security-AdvisorynvdVendor Advisory
www.netgear.com/support/product/xr1000nvdProduct
www.netgear.com/support/product/xr1000v2nvdProduct
www.netgear.com/support/product/xr500nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.436
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000