CVE-2026-9215
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A CSRF vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the administrator. There is no confidentiality impact.
Risk Assessment
Risk of unauthorized router configuration changes, potentially leading to network outages or security breaches.
Recommendation
Update NETGEAR router firmware to the latest version and educate administrators about social engineering threats.
Other vulnerabilities in NETGEAR routers
See all- CVE-2026-9212High
Listed NETGEAR router models have a vulnerability due to insufficient authentication and input validation. Users connected to the local network can execute commands affecting confidentiality or change device configuration.
- CVE-2026-0414Medium
The listed NETGEAR router models have a vulnerability due to insufficient input validation. Authenticated administrators connected to the local network can make unauthorized modifications to router software and functionality.
- CVE-2026-0413Medium
Listed NETGEAR router models have a buffer overflow vulnerability due to insufficient input validation, allowing authenticated administrators on the local network to make unauthorized modifications to router software and functionality.
Original NVD description (English source)
A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS