Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-9215

No fix known EPSS <1%CVSS 6.7

A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.

Published 2026-09-08 · CVE record · OSV

Products: NETGEAR XR1000v2, NETGEAR XR500