Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: NETGEAR RBR840, RBRE950 and 2 more products — kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advi… Clear all filters
TI-2026-00266 CVE-2026-0404 · GHSA-jvf4-gm9f-33g9

Insufficient input validation in NETGEAR Orbi routers

Priority LOW 26

An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows network adjacent attackers authenticated over WiFi or on LAN to execute OS command injections on the router.

CVSS 4.0MEDIUM 4.8 Adjacent network Low privileges No interaction EPSS 0.01062 Published 2026-01-13 Fixed in v7.2.8.5 CWE-20
TI-2026-00267 CVE-2026-0405 · GHSA-2cqm-696m-6jx3

Authentication Bypass in NETGEAR Orbi Devices

Priority LOW 29

An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.

CVSS 4.0MEDIUM 6.1 Adjacent network Low privileges No interaction EPSS 0.00361 Published 2026-01-13 Fixed in v9.13.2.1, V4.6.14.8 +4 CWE-287