Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2026-0403

Insufficient input validation in NETGEAR Orbi routers

An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.

CVSS 4.0 · 1.1 Low EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Rbe970 Rbe970 Firmware Rbe971 and 17 more
CVE-2026-0414

Insufficient Input Validation Allows Unauthorized Modification of Router Software in certain NETGEAR Routers

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

CVSS 4.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Rbe970 Rbe970 Firmware Rbe97x
CVE-2026-0411

A Sensitive Information Disclosure Vulnerability in NETGEAR Orbi Satellites

An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to gain administrator access to the Orbi router. The listed NETGEAR models are affected by this vulnerability. Orbi WiFi Systems without satellite devices are not impacted by this issue.

CVSS 4.0 · 4.2 Medium EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Rbe970 Rbe970 Firmware Rbe97x and 8 more
CVE-2026-3088

Unauthenticated users can disrupt router operation

Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.

CVSS 4.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Rbe970 Rbe970 Firmware Rbe971 and 15 more
CVE-2026-0415

Insufficient input validation vulnerability in certain Orbi routers

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

CVSS 4.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Rbe970 Rbe970 Firmware Rbe97x and 24 more
CVE-2026-0405

Authentication Bypass in NETGEAR Orbi Devices

An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.

CVSS 4.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Cbr750 Cbr750 Firmware Nbr750 and 47 more