CVE-2026-9215: CWE-352 Cross-Site request forgery (CSRF) in NETGEAR XR1000
Affects NETGEAR XR1000Source GCVE Database
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 8% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:AmberWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| NETGEAR XR1000 | Affected
| Fixed in– |
AI-suggested
Mitigation may include educating administrators to avoid interacting with suspicious links or content that could trigger CSRF attacks.
Description
A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.
Impact
An attacker can cause disruption of router operations and tampering with router configuration by exploiting this CSRF vulnerability through social engineering. However, there is no impact on confidentiality of data. The integrity and availability of the router are affected, potentially causing operational issues.
Summary
This vulnerability (CVE-2026-9215) is a CSRF flaw in some NETGEAR routers that enables an attacker to cause a router administrator to unknowingly execute unwanted commands that alter router settings and disrupt its operation. The attack relies on social engineering to convince the administrator to interact with malicious content. There is no confidentiality impact associated with this vulnerability. The CVSS 3.1 base score is 6.4, reflecting medium severity with attack vector as adjacent network, high attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and high availability impact. No affected versions or patch information is provided, and no known exploits are reported in the wild.
Weaknesses
References
- nvd.nist.gov/vuln/detail/CVE-2026-9215 (opens in a new tab)
- kb.netgear.com/000070912/September-2026-NETGEAR-Security-Advisory (opens in a new tab)
- netgear.com/support/product/xr1000 (opens in a new tab)
- netgear.com/support/product/xr1000v2 (opens in a new tab)
- netgear.com/support/product/xr500 (opens in a new tab)