CVE-2026-9215
No fix known EPSS <1%CVSS 6.7
A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.
Products: NETGEAR XR1000v2, NETGEAR XR500