CVE-2026-0403

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0403", "assignerOrgId": "a2826606-91e7-4eb6-899e-8484bd4575d5", "state": "PUBLISHED", "assignerShortName": "NETGEAR", "dateReserved": "2025-12-03T04:16:02.333Z", "datePublished": "2026-01-13T16:00:25.831Z", "dateUpdated": "2026-11-04T00:16:52.276Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "RBR750", "vendor": "NETGEAR", "versions": [{"lessThanOrEqual": "4.6.14.3", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBS750", "vendor": "NETGEAR", "versions": [{"lessThanOrEqual": "4.6.14.3", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBRE960", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.7.15", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBSE960", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.7.15", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBR850", "vendor": "NETGEAR", "versions": [{"lessThan": "V7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBS850", "vendor": "NETGEAR", "versions": [{"lessThan": "V7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBE971", "vendor": "NETGEAR", "versions": [{"lessThan": "v9.10.0.2", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBE970", "vendor": "NETGEAR", "versions": [{"lessThan": "v9.10.0.2", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBR860", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBS860", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}], "cpeApplicability": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbr750:*:*:*:*:*:*:*:*", "versionEndIncluding": "4.6.14.3", "versionStartIncluding": "0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbs750:*:*:*:*:*:*:*:*", "versionEndIncluding": "4.6.14.3", "versionStartIncluding": "0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbre960:*:*:*:*:*:*:*:*", "versionEndExcluding": "v7.2.7.15", "versionStartIncluding": "0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbse960:*:*:*:*:*:*:*:*", "versionEndExcluding": "v7.2.7.15", "versionStartIncluding": "0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbr850:*:*:*:*:*:*:*:*", "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbs850:*:*:*:*:*:*:*:*", "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbe971:*:*:*:*:*:*:*:*", "versionEndExcluding": "v9.10.0.2", "versionStartIncluding": "0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbe970:*:*:*:*:*:*:*:*", "versionEndExcluding": "v9.10.0.2", "versionStartIncluding": "0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbr860:*:*:*:*:*:*:*:*", "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbs860:*:*:*:*:*:*:*:*", "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}], "credits": [{"lang": "en", "type": "finder", "value": "fxc233"}], "datePublic": "2026-01-13T16:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>An insufficient input validation vulnerability in NETGEAR Orbi routers \nallows attackers connected to the router's LAN&nbsp;to execute OS command \ninjections.&nbsp;</p>"}], "value": "An insufficient input validation vulnerability in NETGEAR Orbi routers \nallows attackers connected to the router's LAN\u00a0to execute OS command \ninjections."}], "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88 OS Command Injection"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NO", "Recovery": "USER", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "baseScore": 1.1, "baseSeverity": "LOW", "exploitMaturity": "UNREPORTED", "privilegesRequired": "HIGH", "providerUrgency": "AMBER", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "MODERATE"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "a2826606-91e7-4eb6-899e-8484bd4575d5", "shortName": "NETGEAR", "dateUpdated": "2026-01-13T16:20:30.263Z"}, "references": [{"tags": ["product", "patch"], "url": "https://www.netgear.com/support/product/rbr750"}, {"tags": ["patch", "product"], "url": "https://www.netgear.com/support/product/rbs750"}, {"tags": ["product", "patch"], "url": "https://www.netgear.com/support/product/rbre960"}, {"tags": ["product", "patch"], "url": "https://www.netgear.com/support/product/rbse960"}, {"tags": ["product", "patch"], "url": "https://www.netgear.com/support/product/rbr850"}, {"tags": ["product", "patch"], "url": "https://www.netgear.com/support/product/rbs850"}, {"tags": ["product", "patch"], "url": "https://www.netgear.com/support/product/rbe971"}, {"tags": ["product", "patch"], "url": "https://www.netgear.com/support/product/rbe970"}, {"tags": ["product", "patch"], "url": "https://www.netgear.com/support/product/rbr860"}, {"tags": ["product", "patch"], "url": "https://www.netgear.com/support/product/rbs860"}, {"tags": ["vendor-advisory"], "url": "https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Devices with automatic updates enabled may already have this\npatch applied. If not, please check the firmware version and update it to the\nlatest.</p>\n\n<p>Fixed in:</p><p><span>RBE971 </span><a href=\"https://www.netgear.com/support/product/rbe971\">firmware 9.10.0.2 or later</a><br><span>RBE970 </span><a href=\"https://www.netgear.com/support/product/rbe970\">firmware 9.10.0.2 or later</a><br><span>RBR750</span><a href=\"https://www.netgear.com/support/product/rbr750\"> firmware 7.2.8.5 or later</a><br><span>RBR850 </span><a href=\"https://www.netgear.com/support/product/rbr850\">firmware 7.2.8.5 or later</a><br><span>RBR860 </span><a href=\"https://www.netgear.com/support/product/rbr860\">firmware 7.2.8.5 or later</a><br><span>RBS750</span><a href=\"https://www.netgear.com/support/product/rbs750\"> firmware 7.2.8.5 or later</a><br><span>RBS850 </span><a href=\"https://www.netgear.com/support/product/rbs850\">firmware 7.2.8.5 or later</a><br><span>RBS860 </span><a href=\"https://www.netgear.com/support/product/rbs860\">firmware 7.2.8.5 or later</a><br><span>RBRE960 </span><a href=\"https://www.netgear.com/support/product/rbre960\">firmware 7.2.7.15 or later</a><br><span>RBSE960 </span><a href=\"https://www.netgear.com/support/product/rbse960\">firmware 7.2.7.15 or later</a></p>"}], "value": "Devices with automatic updates enabled may already have this\npatch applied. If not, please check the firmware version and update it to the\nlatest.\n\n\n\nFixed in:\n\nRBE971 firmware 9.10.0.2 or later https://www.netgear.com/support/product/rbe971 \nRBE970 firmware 9.10.0.2 or later https://www.netgear.com/support/product/rbe970 \nRBR750 firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbr750 \nRBR850 firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbr850 \nRBR860 firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbr860 \nRBS750 firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbs750 \nRBS850 firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbs850 \nRBS860 firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbs860 \nRBRE960 firmware 7.2.7.15 or later https://www.netgear.com/support/product/rbre960 \nRBSE960 firmware 7.2.7.15 or later https://www.netgear.com/support/product/rbse960"}], "source": {"discovery": "EXTERNAL"}, "title": "Insufficient input validation in NETGEAR Orbi routers", "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-14T04:57:20.518970Z", "id": "CVE-2026-0403", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-04T00:16:52.276Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-0403", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-14T04:57:20.518970Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-13T19:08:24.923Z"}}], "cna": {"title": "Insufficient input validation in NETGEAR Orbi routers", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "fxc233"}], "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88 OS Command Injection"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "USER", "baseScore": 1.1, "Automatable": "NO", "attackVector": "ADJACENT", "baseSeverity": "LOW", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber", "exploitMaturity": "UNREPORTED", "providerUrgency": "AMBER", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "MODERATE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "NETGEAR", "product": "RBR750", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "4.6.14.3"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBS750", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "4.6.14.3"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBRE960", "versions": [{"status": "affected", "version": "0", "lessThan": "v7.2.7.15", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBSE960", "versions": [{"status": "affected", "version": "0", "lessThan": "v7.2.7.15", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBR850", "versions": [{"status": "affected", "version": "0", "lessThan": "V7.2.8.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBS850", "versions": [{"status": "affected", "version": "0", "lessThan": "V7.2.8.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBE971", "versions": [{"status": "affected", "version": "0", "lessThan": "v9.10.0.2", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBE970", "versions": [{"status": "affected", "version": "0", "lessThan": "v9.10.0.2", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBR860", "versions": [{"status": "affected", "version": "0", "lessThan": "v7.2.8.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBS860", "versions": [{"status": "affected", "version": "0", "lessThan": "v7.2.8.5", "versionType": "custom"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Devices with automatic updates enabled may already have this\npatch applied. If not, please check the firmware version and update it to the\nlatest.\n\n\n\nFixed in:\n\nRBE971 firmware 9.10.0.2 or later https://www.netgear.com/support/product/rbe971 \nRBE970 firmware 9.10.0.2 or later https://www.netgear.com/support/product/rbe970 \nRBR750 firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbr750 \nRBR850 firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbr850 \nRBR860 firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbr860 \nRBS750 firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbs750 \nRBS850 firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbs850 \nRBS860 firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbs860 \nRBRE960 firmware 7.2.7.15 or later https://www.netgear.com/support/product/rbre960 \nRBSE960 firmware 7.2.7.15 or later https://www.netgear.com/support/product/rbse960", "supportingMedia": [{"type": "text/html", "value": "<p>Devices with automatic updates enabled may already have this\npatch applied. If not, please check the firmware version and update it to the\nlatest.</p>\n\n<p>Fixed in:</p><p><span>RBE971 </span><a href=\"https://www.netgear.com/support/product/rbe971\">firmware 9.10.0.2 or later</a><br><span>RBE970 </span><a href=\"https://www.netgear.com/support/product/rbe970\">firmware 9.10.0.2 or later</a><br><span>RBR750</span><a href=\"https://www.netgear.com/support/product/rbr750\"> firmware 7.2.8.5 or later</a><br><span>RBR850 </span><a href=\"https://www.netgear.com/support/product/rbr850\">firmware 7.2.8.5 or later</a><br><span>RBR860 </span><a href=\"https://www.netgear.com/support/product/rbr860\">firmware 7.2.8.5 or later</a><br><span>RBS750</span><a href=\"https://www.netgear.com/support/product/rbs750\"> firmware 7.2.8.5 or later</a><br><span>RBS850 </span><a href=\"https://www.netgear.com/support/product/rbs850\">firmware 7.2.8.5 or later</a><br><span>RBS860 </span><a href=\"https://www.netgear.com/support/product/rbs860\">firmware 7.2.8.5 or later</a><br><span>RBRE960 </span><a href=\"https://www.netgear.com/support/product/rbre960\">firmware 7.2.7.15 or later</a><br><span>RBSE960 </span><a href=\"https://www.netgear.com/support/product/rbse960\">firmware 7.2.7.15 or later</a></p>", "base64": false}]}], "datePublic": "2026-01-13T16:00:00.000Z", "references": [{"url": "https://www.netgear.com/support/product/rbr750", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbs750", "tags": ["patch", "product"]}, {"url": "https://www.netgear.com/support/product/rbre960", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbse960", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbr850", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbs850", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbe971", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbe970", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbr860", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbs860", "tags": ["product", "patch"]}, {"url": "https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "An insufficient input validation vulnerability in NETGEAR Orbi routers \nallows attackers connected to the router's LAN\u00a0to execute OS command \ninjections.", "supportingMedia": [{"type": "text/html", "value": "<p>An insufficient input validation vulnerability in NETGEAR Orbi routers \nallows attackers connected to the router's LAN&nbsp;to execute OS command \ninjections.&nbsp;</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbr750:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "4.6.14.3", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbs750:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "4.6.14.3", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbre960:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "v7.2.7.15", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbse960:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "v7.2.7.15", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbr850:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbs850:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbe971:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "v9.10.0.2", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbe970:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "v9.10.0.2", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbr860:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbs860:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0"}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "a2826606-91e7-4eb6-899e-8484bd4575d5", "shortName": "NETGEAR", "dateUpdated": "2026-01-13T16:20:30.263Z"}}}, "cveMetadata": {"cveId": "CVE-2026-0403", "state": "PUBLISHED", "dateUpdated": "2026-11-04T00:16:52.276Z", "dateReserved": "2025-12-03T04:16:02.333Z", "assignerOrgId": "a2826606-91e7-4eb6-899e-8484bd4575d5", "datePublished": "2026-01-13T16:00:25.831Z", "assignerShortName": "NETGEAR"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "RBR750", "vendor": "NETGEAR", "versions": [{"lessThanOrEqual": "4.6.14.3", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBS750", "vendor": "NETGEAR", "versions": [{"lessThanOrEqual": "4.6.14.3", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBRE960", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.7.15", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBSE960", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.7.15", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBR850", "vendor": "NETGEAR", "versions": [{"lessThan": "V7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBS850", "vendor": "NETGEAR", "versions": [{"lessThan": "V7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBE971", "vendor": "NETGEAR", "versions": [{"lessThan": "v9.10.0.2", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBE970", "vendor": "NETGEAR", "versions": [{"lessThan": "v9.10.0.2", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBR860", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBS860", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "a2826606-91e7-4eb6-899e-8484bd4575d5"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rbe971_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EDAED6D8-B0E2-45A0-A817-84112A556728", "versionEndExcluding": "9.10.0.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbe971:-:*:*:*:*:*:*:*", "matchCriteriaId": "C3080999-19F9-4651-80F3-A6461C27E489", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rbe970_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "04268C8F-D8F6-46A9-8006-8FEED3ABF440", "versionEndExcluding": "9.10.0.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbe970:-:*:*:*:*:*:*:*", "matchCriteriaId": "DE1F3088-9598-4EB5-A8A0-E0D4E529CB12", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0D73C133-BD68-4532-B267-61796ECB1A07", "versionEndExcluding": "7.2.8.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*", "matchCriteriaId": "C13F5C69-FA9B-472A-9036-0C2967BDCDE9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7E5B3B94-CC3D-4CFC-9FE2-9EF5CEBD4B1A", "versionEndExcluding": "7.2.8.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*", "matchCriteriaId": "D92E4C8E-222A-476C-8273-F7171FC61F0B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rbr860_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "659D5BE0-C045-48FD-9214-B35D408AF0BA", "versionEndExcluding": "7.2.8.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbr860:-:*:*:*:*:*:*:*", "matchCriteriaId": "928FC2C1-4D05-495B-ACD8-1D013EB18EE6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0821D003-6E44-46DB-B3D1-2CA553483036", "versionEndExcluding": "7.2.8.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*", "matchCriteriaId": "B529194C-C440-4BC3-850F-0613FC548F86", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "79468E3C-C58C-4076-BB85-4C331BCC300C", "versionEndExcluding": "7.2.8.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*", "matchCriteriaId": "221CA950-E984-44CD-9E1B-3AADE3CEBE52", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rbs860_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4D8CED97-AA9C-4655-B521-319021F1F9DB", "versionEndExcluding": "7.2.8.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbs860:-:*:*:*:*:*:*:*", "matchCriteriaId": "E6630553-D726-4524-8BD2-3EE839DE6676", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rbre960_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C22E56DA-E0B9-4A24-B818-F7919B8CDB5C", "versionEndExcluding": "7.2.8.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbre960:-:*:*:*:*:*:*:*", "matchCriteriaId": "314FF95E-5A0C-4A6B-B8D6-28546F2C1A12", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rbse960_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "19048F97-E226-4287-A206-9006F7B91E21", "versionEndExcluding": "7.2.8.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbse960:-:*:*:*:*:*:*:*", "matchCriteriaId": "419AF785-61C6-4911-A170-6A06D7991948", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An insufficient input validation vulnerability in NETGEAR Orbi routers \nallows attackers connected to the router's LAN\u00a0to execute OS command \ninjections."}, {"lang": "es", "value": "Una vulnerabilidad de validaci\u00f3n de entrada insuficiente en routers NETGEAR Orbi permite a atacantes conectados a la LAN del router ejecutar inyecciones de comandos del sistema operativo."}], "id": "CVE-2026-0403", "lastModified": "2026-06-17T10:10:45.330", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NO", "Recovery": "USER", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "availabilityRequirement": "NOT_DEFINED", "baseScore": 1.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "UNREPORTED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "HIGH", "providerUrgency": "AMBER", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "MODERATE"}, "source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0403", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-01-14T04:57:20.518970Z", "version": "2.0.3"}}]}, "published": "2026-01-13T16:16:10.150", "references": [{"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Vendor Advisory"], "url": "https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Product"], "url": "https://www.netgear.com/support/product/rbe970"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Product"], "url": "https://www.netgear.com/support/product/rbe971"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Product"], "url": "https://www.netgear.com/support/product/rbr750"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Product"], "url": "https://www.netgear.com/support/product/rbr850"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Product"], "url": "https://www.netgear.com/support/product/rbr860"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Product"], "url": "https://www.netgear.com/support/product/rbre960"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Product"], "url": "https://www.netgear.com/support/product/rbs750"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Product"], "url": "https://www.netgear.com/support/product/rbs850"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Product"], "url": "https://www.netgear.com/support/product/rbs860"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Product"], "url": "https://www.netgear.com/support/product/rbse960"}], "sourceIdentifier": "a2826606-91e7-4eb6-899e-8484bd4575d5", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T16:23:51.072365+00:00", "value": {"mitigation_remediation": ["Update the router firmware to the latest release that includes the fix: for RBE971 and RBE970 use firmware 9.10.0.2 or newer; for RBR750, RBR850, RBR860, RBS750, RBS850, and RBS860 use firmware 7.2.8.5 or newer; for RBRE960 and RBSE960 use firmware 7.2.7.15 or newer.", "Enable the router\u2019s automatic update feature so that future security patches are installed without manual intervention.", "Limit LAN hosts that can access the router\u2019s configuration interface by implementing network segmentation, MAC/IP filtering, or a firewall rule that blocks all but essential traffic until the devices are fully updated."], "summary": {"action": "Patch Now", "impact": "Remote Command Execution"}, "threat_synthesis": {"affected_systems": "Affected devices include NETGEAR Orbi models RBE970, RBE971, RBR750, RBR850, RBR860, RBRE960, RBS750, RBS850, RBS860, and RBSE960. Firmware updates that address the issue start with RBE971 9.10.0.2 or later, RBE970 9.10.0.2 or later, RBR750, RBR850, RBR860, RBS750, RBS850, RBS860 7.2.8.5 or later, and RBRE960 and RBSE960 7.2.7.15 or later. Devices running earlier firmware versions are susceptible.", "description_and_impact": "An insufficient input validation flaw in NETGEAR Orbi routers permits an attacker who can connect to the router\u2019s LAN to inject and execute arbitrary operating system commands. The weakness is a classic CWE\u201120 scenario, where unsanitized input is passed directly to system calls, enabling the attacker to control command execution on the device. Successful exploitation could allow modification of router configuration, creation of backdoors, or use of the device as a foothold to infiltrate other network equipment.", "risk_and_exploitability": "With a CVSS score of 1.1 and an EPSS of less than 1%, the technical severity appears low, yet the flaw remains tactically valuable while an attacker is present on the LAN. Because the attack vector requires local network access and the vendor does not list this CVE in the KEV catalog, the likelihood of widespread exploitation is modest, but the impact of successful exploitation\u2014remote command execution\u2014remains high. Ensuring that only trusted hosts can reach the router\u2019s management interfaces and promptly applying the listed firmware upgrades mitigates the threat."}}}}, "created": "2026-04-18T16:30:05.083492+00:00", "updated": "2026-04-18T16:30:05.083505+00:00", "vendors": []}