Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2026-0403

Insufficient input validation in NETGEAR Orbi routers

An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.

CVSS 4.0 · 1.1 Low EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Rbe970 Rbe970 Firmware Rbe971 and 17 more
CVE-2026-0413

Buffer overflow vulnerability in certain NETGEAR Nighthawk routers

A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

CVSS 4.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Rbe370 Rbe370 Firmware Rbe37x and 27 more
CVE-2026-3088

Unauthenticated users can disrupt router operation

Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.

CVSS 4.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Rbe970 Rbe970 Firmware Rbe971 and 15 more
CVE-2026-0415

Insufficient input validation vulnerability in certain Orbi routers

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

CVSS 4.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Rbe970 Rbe970 Firmware Rbe97x and 24 more
CVE-2026-0405

Authentication Bypass in NETGEAR Orbi Devices

An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.

CVSS 4.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Netgear
Products
Cbr750 Cbr750 Firmware Nbr750 and 47 more
CVE-2026-0404

Insufficient input validation in NETGEAR Orbi routers

An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows network adjacent attackers authenticated over WiFi or on LAN to execute OS command injections on the router. DHCPv6 is not enabled by default.

CVSS 4.0 · 4.8 Medium EPSS 1.1% KEV · Not listed
Vendors
Netgear
Products
Rbr750 Rbr750 Firmware Rbr840 and 21 more