Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-9215 Details

Description

A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: Netgear, Inc.CVSS-B:6.7 MEDIUMVector:CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://kb.netgear.com/000070912/September-2026-NETGEAR-Security-Advisory Netgear, Inc.Vendor Advisory
https://www.netgear.com/support/product/xr1000 Netgear, Inc.Product
https://www.netgear.com/support/product/xr1000v2 Netgear, Inc.Product
https://www.netgear.com/support/product/xr500 Netgear, Inc.Product

Weakness Enumeration

CWE-IDCWE NameSource
CWE-352Cross-Site Request Forgery (CSRF)Netgear, Inc.

Affected Products

ProductVersions

Change History

4 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-9215
NVD Published Date:
Sep 8, 2026
NVD Last Modified:
Sep 11, 2026
Source:
Netgear, Inc.
CVE-2026-9215 Details - Not Deferred