Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-11814

Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.

CVSS 4.0 · 4.9 Medium EPSS 2.2% KEV · Not listed
Vendors
Netgear
Products
Be9300 Be9300 Firmware Mr60 and 49 more
CVE-2026-11738

Insufficient input validation in certain NETGEAR Nighthawk routers allows administrators to tamper with the device.

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.

CVSS 4.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Be9300 Be9300 Firmware Mr60 and 52 more
CVE-2026-0411

A Sensitive Information Disclosure Vulnerability in NETGEAR Orbi Satellites

An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to gain administrator access to the Orbi router. The listed NETGEAR models are affected by this vulnerability. Orbi WiFi Systems without satellite devices are not impacted by this issue.

CVSS 4.0 · 4.2 Medium EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Rbe970 Rbe970 Firmware Rbe97x and 8 more
CVE-2023-41183

NETGEAR Orbi 760 SOAP API Authentication Bypass Vulnerability

NETGEAR Orbi 760 SOAP API Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR Orbi 760 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the SOAP API. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-20524.

CVSS 3.0 · 8.8 High EPSS 13.6% KEV · Not listed
Vendors
Netgear
Products
Rbr760 Rbr760 Firmware