Is CVE-2026-9215 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-9215 being exploited in the wild.

How severe is CVE-2026-9215?

Medium severity, with a CVSS score of 6.7, published 8 September 2026.

Which products and versions are affected?

NETGEAR XR1000 before 1.1.0.22; NETGEAR XR1000v2 before 1.1.0.22; NETGEAR Xr500 before 2.3.5.152.

Is there a fix for CVE-2026-9215?

A patch was published on 2026-09-08: Firmware updates available for XR1000, XR1000v2, and XR500 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-9215 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-9215?

Check whether you run NETGEAR XR1000, NETGEAR Xr1000 Firmware, NETGEAR XR1000v2 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-9215: NETGEAR XR gaming routers CSRF vulnerability

CVE-2026-9215 · Severity: medium · CVSS 6.7 · Published 2026-09-08

NETGEAR's gaming routers contain a cross-site request forgery (CSRF) flaw that allows attackers to manipulate router configuration settings if they trick an administrator into visiting a malicious website. While an attacker cannot directly extract data or gain unauthorized access, they can disrupt router operations and modify settings—requiring the administrator's active participation through social engineering. This could degrade network performance or lock legitimate users out of configuration.

Technologies: NETGEAR XR1000, NETGEAR XR1000v2. Vendors: NETGEAR.

Quick answers

Is CVE-2026-9215 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-9215 being exploited in the wild.
How severe is CVE-2026-9215?: Medium severity, with a CVSS score of 6.7, published 8 September 2026.
Which products and versions are affected?: NETGEAR XR1000 before 1.1.0.22; NETGEAR XR1000v2 before 1.1.0.22; NETGEAR Xr500 before 2.3.5.152.
Is there a fix for CVE-2026-9215?: A patch was published on 2026-09-08: Firmware updates available for XR1000, XR1000v2, and XR500 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-9215 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-9215?: Check whether you run NETGEAR XR1000, NETGEAR Xr1000 Firmware, NETGEAR XR1000v2 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A CSRF vulnerability in NETGEAR XR-series gaming routers allows attackers to forge requests that modify router configuration when a logged-in administrator visits an attacker-controlled webpage. The vulnerability requires social engineering to trick the router administrator into visiting the malicious site while authenticated to the router's management interface. An attacker can tamper with router settings and disrupt operations, though the vulnerability carries no confidentiality impact and requires active assistance from the administrator. Patches are available: XR1000 and XR1000v2 are fixed in firmware version 1.1.0.22, while XR500 (end-of-support) is fixed in version 2.3.5.152.

Affected products

NETGEAR XR1000 before 1.1.0.22
NETGEAR XR1000v2 before 1.1.0.22
NETGEAR XR500 before 2.3.5.152

Timeline

2026-09-08: disclosed
2026-09-08: patched: Firmware updates available for XR1000, XR1000v2, and XR500

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.