CVE-2026-9215

Analyzed Analyzed - Analysis Complete

Cross-Site Request Forgery in NETGEAR Router Firmware

Publication date: 2026-09-08

Last updated on: 2026-09-11

Assigner: Netgear, Inc.

Description

A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-11

Generated

2026-09-29

AI Q&A

2026-09-09

EPSS Evaluated

2026-09-27

NVD

CVE-2026-9215

Affected Vendors & Products

Vendor	Product	Version / Range
netgear	xr1000_firmware	to 1.1.0.22 (exc)
netgear	xr1000v2_firmware	to 1.1.0.22 (exc)
netgear	xr500_firmware	to 2.3.5.152 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-352	The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Attack-Flow Graph

Executive Summary

CVE-2026-9215 is a cross-site request forgery (CSRF) vulnerability affecting certain NETGEAR XR series gaming routers. It allows an attacker to manipulate router configuration and disrupt operations by tricking an administrator into performing actions through social engineering.

Detection Guidance

Detecting this CSRF vulnerability requires checking if your NETGEAR XR series router is running a vulnerable firmware version. Log in to the router's admin interface and navigate to the firmware version section. Compare the installed version against the patched versions: XR1000 V1.1.0.22, XR1000v2 V1.1.0.22, or XR500 V2.3.5.152. If your device is running an older version, it is vulnerable.

Impact Analysis

An attacker could tamper with router settings, disrupting network operations. The vulnerability requires the administrator to be tricked into taking action, so user awareness is critical. No confidentiality impact means sensitive data is not exposed.

Mitigation Strategies

Immediately update the firmware to the latest patched version for your model: XR1000 V1.1.0.22, XR1000v2 V1.1.0.22, or XR500 V2.3.5.152. If you have an XR500, consider upgrading to a newer supported device as it is End-of-Support and will not receive future updates. Enable automatic updates if available to prevent future vulnerabilities.

Hi! I’m here to help you understand CVE-2026-9215. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70