medium6.7
CVE-2026-9215
A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router ad…
Impact
A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Xr1000 Firmware | before 1.1.0.22 |
| Netgear | Xr1000v2 Firmware | before 1.1.0.22 |
| Netgear | Xr500 Firmware | before 2.3.5.152 |