CVE Feed

    Dashboard / CVE / CVE-2026-9215

    CVE-2026-9215

    A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.

    Published:Sep 8, 2026
    Last Modified:Sep 10, 2026
    EPS:Sep 8, 2026
    EPSS Score:0.00119
    CVSS Score:6.7

    Affected Products

    Vendor
    Netgear
    Product
    Xr1000
    Vendor
    Netgear
    Product
    Xr1000v2
    Vendor
    Netgear
    Product
    Xr500

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-11736 (CVSS 1.9) — A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin use…
    CVE-2026-11735 (CVSS 1.9) — A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin …
    CVE-2026-11739 (CVSS 4.9) — A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent att…
    CVE-2026-62657 (CVSS 4.9) — A security flaw in the router's certificate validation process was discovered in the NETGEAR XR1000 Gaming Rou…
    CVE-2026-0418 (CVSS 4.3) — Insufficient configuration management in the listed devices allows authenticated administrators connected to t…
    CVE-2026-0417 (CVSS 4.3) — Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators …
    CVE-2026-9210 (CVSS 4.9) — Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators c…
    CVE-2026-9213 (CVSS 6.9) — A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamp…
    CVE-2026-0410 (CVSS 1.9) — Authenticated administrators connected to the local network can gain elevated access to the router and make u…
    CVE-2025-25246 (CVSS 8.1) — NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code executi…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High