Authentication Bypass in NETGEAR Orbi Devices
Priority LOW 29CWE-287Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-287.
Summary
An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00361 30th percentileScored 2026-11-07
Fix Fixed RBE970 (NETGEAR): v9.13.2.1RBE971 (NETGEAR): v9.13.2.1+23 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| NETGEAR | RBE970 | before v9.13.2.1 | v9.13.2.1 | Patch available | CNA |
| NETGEAR | RBE971 | before v9.13.2.1 | v9.13.2.1 | Patch available | CNA |
| NETGEAR | CBR750 | before V4.6.14.8 | V4.6.14.8 | Patch available | CNA |
| NETGEAR | NBR750 | before V4.6.15.14 | V4.6.15.14 | Patch available | CNA |
| NETGEAR | RBE770 | before v10.5.20.7 | v10.5.20.7 | Patch available | CNA |
| NETGEAR | RBE771 | before v10.5.20.7 | v10.5.20.7 | Patch available | CNA |
| NETGEAR | RBE772 | before v10.5.20.7 | v10.5.20.7 | Patch available | CNA |
| NETGEAR | RBE773 | before v10.5.20.7 | v10.5.20.7 | Patch available | CNA |
| NETGEAR | RBR750 | before v7.2.8.2 | v7.2.8.2 | Patch available | CNA |
| NETGEAR | RBS750 | before v7.2.8.2 | v7.2.8.2 | Patch available | CNA |
| NETGEAR | RBR840 | before v7.2.8.2 | v7.2.8.2 | Patch available | CNA |
| NETGEAR | RBS840 | before v7.2.8.2 | v7.2.8.2 | Patch available | CNA |
| NETGEAR | RBR850 | before v7.2.8.2 | v7.2.8.2 | Patch available | CNA |
| NETGEAR | RBS850 | before v7.2.8.2 | v7.2.8.2 | Patch available | CNA |
| NETGEAR | RBR860 | before v7.2.8.2 | v7.2.8.2 | Patch available | CNA |
| NETGEAR | RBS860 | before v7.2.8.2 | v7.2.8.2 | Patch available | CNA |
| NETGEAR | RBRE950 | before v7.2.8.2 | v7.2.8.2 | Patch available | CNA |
| NETGEAR | RBSE950 | before v7.2.8.2 | v7.2.8.2 | Patch available | CNA |
| NETGEAR | RBRE960 | before v7.2.8.2 | v7.2.8.2 | Patch available | CNA |
| NETGEAR | RBSE960 | before v7.2.8.2 | v7.2.8.2 | Patch available | CNA |
| NETGEAR | RBE370 | before v12.1.3.11 | v12.1.3.11 | Patch available | CNA |
| NETGEAR | RBE371 | before v12.1.3.11 | v12.1.3.11 | Patch available | CNA |
| NETGEAR | RBE372 | before v12.1.3.11 | v12.1.3.11 | Patch available | CNA |
| NETGEAR | RBE373 | before v12.1.3.11 | v12.1.3.11 | Patch available | CNA |
| NETGEAR | RBE374 | before v12.1.3.11 | v12.1.3.11 | Patch available | CNA |
- RBE970 VendorNETGEAR Affected before v9.13.2.1 Fixed in v9.13.2.1 Patch available CNA
- RBE971 VendorNETGEAR Affected before v9.13.2.1 Fixed in v9.13.2.1 Patch available CNA
- CBR750 VendorNETGEAR Affected before V4.6.14.8 Fixed in V4.6.14.8 Patch available CNA
- NBR750 VendorNETGEAR Affected before V4.6.15.14 Fixed in V4.6.15.14 Patch available CNA
- RBE770 VendorNETGEAR Affected before v10.5.20.7 Fixed in v10.5.20.7 Patch available CNA
- RBE771 VendorNETGEAR Affected before v10.5.20.7 Fixed in v10.5.20.7 Patch available CNA
- RBE772 VendorNETGEAR Affected before v10.5.20.7 Fixed in v10.5.20.7 Patch available CNA
- RBE773 VendorNETGEAR Affected before v10.5.20.7 Fixed in v10.5.20.7 Patch available CNA
- RBR750 VendorNETGEAR Affected before v7.2.8.2 Fixed in v7.2.8.2 Patch available CNA
- RBS750 VendorNETGEAR Affected before v7.2.8.2 Fixed in v7.2.8.2 Patch available CNA
- RBR840 VendorNETGEAR Affected before v7.2.8.2 Fixed in v7.2.8.2 Patch available CNA
- RBS840 VendorNETGEAR Affected before v7.2.8.2 Fixed in v7.2.8.2 Patch available CNA
- RBR850 VendorNETGEAR Affected before v7.2.8.2 Fixed in v7.2.8.2 Patch available CNA
- RBS850 VendorNETGEAR Affected before v7.2.8.2 Fixed in v7.2.8.2 Patch available CNA
- RBR860 VendorNETGEAR Affected before v7.2.8.2 Fixed in v7.2.8.2 Patch available CNA
- RBS860 VendorNETGEAR Affected before v7.2.8.2 Fixed in v7.2.8.2 Patch available CNA
- RBRE950 VendorNETGEAR Affected before v7.2.8.2 Fixed in v7.2.8.2 Patch available CNA
- RBSE950 VendorNETGEAR Affected before v7.2.8.2 Fixed in v7.2.8.2 Patch available CNA
- RBRE960 VendorNETGEAR Affected before v7.2.8.2 Fixed in v7.2.8.2 Patch available CNA
- RBSE960 VendorNETGEAR Affected before v7.2.8.2 Fixed in v7.2.8.2 Patch available CNA
- RBE370 VendorNETGEAR Affected before v12.1.3.11 Fixed in v12.1.3.11 Patch available CNA
- RBE371 VendorNETGEAR Affected before v12.1.3.11 Fixed in v12.1.3.11 Patch available CNA
- RBE372 VendorNETGEAR Affected before v12.1.3.11 Fixed in v12.1.3.11 Patch available CNA
- RBE373 VendorNETGEAR Affected before v12.1.3.11 Fixed in v12.1.3.11 Patch available CNA
- RBE374 VendorNETGEAR Affected before v12.1.3.11 Fixed in v12.1.3.11 Patch available CNA
CPE configurations NVD · 50
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:netgear:cbr750_firmware:*:*:*:*:*:*:*:* | before 4.6.14.8 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:cbr750:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:nbr750_firmware:*:*:*:*:*:*:*:* | before 4.6.15.14 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:nbr750:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbe370_firmware:*:*:*:*:*:*:*:* | before 12.1.3.11 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbe370:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbe371_firmware:*:*:*:*:*:*:*:* | before 12.1.3.11 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbe371:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbe372_firmware:*:*:*:*:*:*:*:* | before 12.1.3.11 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbe372:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
- cpe:2.3:o:netgear:cbr750_firmware:*:*:*:*:*:*:*:* Versions before 4.6.14.8 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:cbr750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:nbr750_firmware:*:*:*:*:*:*:*:* Versions before 4.6.15.14 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:nbr750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbe370_firmware:*:*:*:*:*:*:*:* Versions before 12.1.3.11 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbe370:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbe371_firmware:*:*:*:*:*:*:*:* Versions before 12.1.3.11 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbe371:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbe372_firmware:*:*:*:*:*:*:*:* Versions before 12.1.3.11 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbe372:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
Show 40 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:netgear:rbe373_firmware:*:*:*:*:*:*:*:* | before 12.1.3.11 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbe373:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbe374_firmware:*:*:*:*:*:*:*:* | before 12.1.3.11 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbe374:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbe770_firmware:*:*:*:*:*:*:*:* | before 10.5.20.7 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbe770:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbe771_firmware:*:*:*:*:*:*:*:* | before 10.5.20.7 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbe771:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbe772_firmware:*:*:*:*:*:*:*:* | before 10.5.20.7 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbe772:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbe773_firmware:*:*:*:*:*:*:*:* | before 10.5.20.7 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbe773:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbe970_firmware:*:*:*:*:*:*:*:* | before 9.13.2.1 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbe970:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbe971_firmware:*:*:*:*:*:*:*:* | before 9.13.2.1 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbe971:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:* | before 7.2.8.2 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbr840_firmware:*:*:*:*:*:*:*:* | before 7.2.8.2 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbr840:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:* | before 7.2.8.2 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbr860_firmware:*:*:*:*:*:*:*:* | before 7.2.8.2 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbr860:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:* | before 7.2.8.2 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbs840_firmware:*:*:*:*:*:*:*:* | before 7.2.8.2 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbs840:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:* | before 7.2.8.2 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbs860_firmware:*:*:*:*:*:*:*:* | before 7.2.8.2 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbs860:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbre950_firmware:*:*:*:*:*:*:*:* | before 7.2.8.2 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbre950:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbre960_firmware:*:*:*:*:*:*:*:* | before 7.2.8.2 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbre960:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbse950_firmware:*:*:*:*:*:*:*:* | before 7.2.8.2 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbse950:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
| cpe:2.3:o:netgear:rbse960_firmware:*:*:*:*:*:*:*:* | before 7.2.8.2 | Vulnerable | NETGEAR |
| cpe:2.3:h:netgear:rbse960:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NETGEAR |
- cpe:2.3:o:netgear:rbe373_firmware:*:*:*:*:*:*:*:* Versions before 12.1.3.11 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbe373:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbe374_firmware:*:*:*:*:*:*:*:* Versions before 12.1.3.11 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbe374:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbe770_firmware:*:*:*:*:*:*:*:* Versions before 10.5.20.7 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbe770:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbe771_firmware:*:*:*:*:*:*:*:* Versions before 10.5.20.7 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbe771:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbe772_firmware:*:*:*:*:*:*:*:* Versions before 10.5.20.7 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbe772:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbe773_firmware:*:*:*:*:*:*:*:* Versions before 10.5.20.7 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbe773:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbe970_firmware:*:*:*:*:*:*:*:* Versions before 9.13.2.1 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbe970:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbe971_firmware:*:*:*:*:*:*:*:* Versions before 9.13.2.1 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbe971:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:* Versions before 7.2.8.2 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbr840_firmware:*:*:*:*:*:*:*:* Versions before 7.2.8.2 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbr840:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:* Versions before 7.2.8.2 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbr860_firmware:*:*:*:*:*:*:*:* Versions before 7.2.8.2 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbr860:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:* Versions before 7.2.8.2 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbs840_firmware:*:*:*:*:*:*:*:* Versions before 7.2.8.2 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbs840:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:* Versions before 7.2.8.2 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbs860_firmware:*:*:*:*:*:*:*:* Versions before 7.2.8.2 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbs860:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbre950_firmware:*:*:*:*:*:*:*:* Versions before 7.2.8.2 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbre950:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbre960_firmware:*:*:*:*:*:*:*:* Versions before 7.2.8.2 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbre960:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbse950_firmware:*:*:*:*:*:*:*:* Versions before 7.2.8.2 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbse950:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
- cpe:2.3:o:netgear:rbse960_firmware:*:*:*:*:*:*:*:* Versions before 7.2.8.2 Vulnerable ·NETGEAR
- cpe:2.3:h:netgear:rbse960:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NETGEAR
Remediation
- Fix · CNA RBE970 (NETGEAR) Fixed in v9.13.2.1
- Fix · CNA RBE971 (NETGEAR) Fixed in v9.13.2.1
- Fix · CNA CBR750 (NETGEAR) Fixed in V4.6.14.8
- Fix · CNA NBR750 (NETGEAR) Fixed in V4.6.15.14
- Fix · CNA RBE770 (NETGEAR) Fixed in v10.5.20.7
- Fix · CNA RBE771 (NETGEAR) Fixed in v10.5.20.7
- Fix · CNA RBE772 (NETGEAR) Fixed in v10.5.20.7
- Fix · CNA RBE773 (NETGEAR) Fixed in v10.5.20.7
- Fix · CNA RBR750 (NETGEAR) Fixed in v7.2.8.2
- Fix · CNA RBS750 (NETGEAR) Fixed in v7.2.8.2
- Fix · CNA RBR840 (NETGEAR) Fixed in v7.2.8.2
- Fix · CNA RBS840 (NETGEAR) Fixed in v7.2.8.2
- Fix · CNA RBR850 (NETGEAR) Fixed in v7.2.8.2
- Fix · CNA RBS850 (NETGEAR) Fixed in v7.2.8.2
- Fix · CNA RBR860 (NETGEAR) Fixed in v7.2.8.2
- Fix · CNA RBS860 (NETGEAR) Fixed in v7.2.8.2
- Fix · CNA RBRE950 (NETGEAR) Fixed in v7.2.8.2
- Fix · CNA RBSE950 (NETGEAR) Fixed in v7.2.8.2
- Fix · CNA RBRE960 (NETGEAR) Fixed in v7.2.8.2
- Fix · CNA RBSE960 (NETGEAR) Fixed in v7.2.8.2
- Fix · CNA RBE370 (NETGEAR) Fixed in v12.1.3.11
- Fix · CNA RBE371 (NETGEAR) Fixed in v12.1.3.11
- Fix · CNA RBE372 (NETGEAR) Fixed in v12.1.3.11
- Fix · CNA RBE373 (NETGEAR) Fixed in v12.1.3.11
- Fix · CNA RBE374 (NETGEAR) Fixed in v12.1.3.11
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
NETGEAR RBE970, RBE971 and 12 more products — kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advi…
3 records Highest priority Priority LOW 3 LOW
Other records, highest priority first
- TI-2026-00266 Insufficient input validation in NETGEAR Orbi routersPriority LOW 26
- TI-2026-00265 Insufficient input validation in NETGEAR Orbi routersPriority LOW 9
Timeline
- 2026-10-02 Threatist record created from CVE-2026-0405
- 2026-10-03 Alias added: GHSA-2cqm-696m-6jx3
References
Patch 26
- https://www.netgear.com/support/product/rbe971
- https://www.netgear.com/support/product/rbe970
- https://www.netgear.com/support/product/cbr750
- https://www.netgear.com/support/product/nbr750
- https://www.netgear.com/support/product/rbe770
- https://www.netgear.com/support/product/rbe771
- https://www.netgear.com/support/product/rbe772
- https://www.netgear.com/support/product/rbe773
- https://www.netgear.com/support/product/rbr750
- https://www.netgear.com/support/product/rbs750
- https://www.netgear.com/support/product/rbr840
- https://www.netgear.com/support/product/rbs840
- https://www.netgear.com/support/product/rbr850
- https://www.netgear.com/support/product/rbs850
- https://www.netgear.com/support/product/rbr860
- https://www.netgear.com/support/product/rbs860
- https://www.netgear.com/support/product/rbre950
- https://www.netgear.com/support/product/rbse950
- https://www.netgear.com/support/product/rbre960
- https://www.netgear.com/support/product/rbse960
- https://www.netgear.com/support/product/rbe370
- https://www.netgear.com/support/product/rbe371
- https://www.netgear.com/support/product/rbe372
- https://www.netgear.com/support/product/rbe373
- https://www.netgear.com/support/product/rbe374
- https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory
More NETGEAR Cbr750 Firmware vulnerabilities
- TI-2021-20709 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1CRITICAL 9.8
- TI-2021-20699 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1CRITICAL 9.8
- TI-2021-20717 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1CRITICAL 10.0
- TI-2021-20708 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1CRITICAL 9.8
- TI-2021-20707 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1CRITICAL 9.8
- TI-2021-20703 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. CVSS 3.1CRITICAL 9.8
Sources
- CVE-2026-0405 · CVE Program
- CVE-2026-0405 · NVD
- FIRST EPSS
- GHSA-2cqm-696m-6jx3 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences