GHSA-m3w7-g2mp-8r99MediumCVSS 6.4
A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker...
🔗 CVE IDs covered (1)
📋 Description
A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.
🔗 References (6)
- https://nvd.nist.gov/vuln/detail/CVE-2026-9215
- https://www.netgear.com/support/product/xr1000
- https://www.netgear.com/support/product/xr1000v2
- https://www.netgear.com/support/product/xr500
- https://kb.netgear.com/000070912/September-2026-NETGEAR-Security-Advisory
- https://github.com/advisories/GHSA-m3w7-g2mp-8r99