← Database

CVE-2026-9215

MEDIUM CVSS: 6.7 Published: 2026-09-08 Modified: 2026-09-11

Description

A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.

Affected Platforms

Netgear Xr500Netgear Xr500 FirmwareNetgear Xr1000 FirmwareNetgear Xr1000Netgear Xr1000V2Netgear Xr1000V2 Firmware

Weakness Type

CWE-352

References