CVE-2026-0404

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0404", "assignerOrgId": "a2826606-91e7-4eb6-899e-8484bd4575d5", "state": "PUBLISHED", "assignerShortName": "NETGEAR", "dateReserved": "2025-12-03T04:16:10.186Z", "datePublished": "2026-01-13T16:01:14.944Z", "dateUpdated": "2026-02-26T15:04:43.482Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "RBRE960", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBSE960", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBR850", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBS850", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBR860", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBS860", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBRE950", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBSE950", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBR750", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBS750", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBR840", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBS840", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}], "cpeApplicability": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbre960:*:*:*:*:*:*:*:*", "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbse960:*:*:*:*:*:*:*:*", "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbr850:*:*:*:*:*:*:*:*", "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbs850:*:*:*:*:*:*:*:*", "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbr860:*:*:*:*:*:*:*:*", "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbs860:*:*:*:*:*:*:*:*", "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbre950:*:*:*:*:*:*:*:*", "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbse950:*:*:*:*:*:*:*:*", "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbr750:*:*:*:*:*:*:*:*", "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbs750:*:*:*:*:*:*:*:*", "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbr840:*:*:*:*:*:*:*:*", "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbs840:*:*:*:*:*:*:*:*", "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}], "credits": [{"lang": "en", "type": "finder", "value": "Hyunseok Yun"}], "datePublic": "2026-01-13T16:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>An insufficient input validation vulnerability in NETGEAR Orbi devices' \nDHCPv6 functionality&nbsp;allows network adjacent attackers authenticated \nover&nbsp;WiFi or on LAN&nbsp;to execute OS command injections on the router. \nDHCPv6 is not enabled by default.</p><p></p>"}], "value": "An insufficient input validation vulnerability in NETGEAR Orbi devices' \nDHCPv6 functionality\u00a0allows network adjacent attackers authenticated \nover\u00a0WiFi or on LAN\u00a0to execute OS command injections on the router. \nDHCPv6 is not enabled by default."}], "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88 OS Command Injection"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NO", "Recovery": "USER", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "ADJACENT", "baseScore": 4.8, "baseSeverity": "MEDIUM", "exploitMaturity": "UNREPORTED", "privilegesRequired": "LOW", "providerUrgency": "AMBER", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "MODERATE"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "a2826606-91e7-4eb6-899e-8484bd4575d5", "shortName": "NETGEAR", "dateUpdated": "2026-01-13T16:22:30.971Z"}, "references": [{"tags": ["patch", "product"], "url": "https://www.netgear.com/support/product/rbre960"}, {"tags": ["product", "patch"], "url": "https://www.netgear.com/support/product/rbse960"}, {"tags": ["product", "patch"], "url": "https://www.netgear.com/support/product/rbr850"}, {"tags": ["product", "patch"], "url": "https://www.netgear.com/support/product/rbs850"}, {"tags": ["product", "patch"], "url": "https://www.netgear.com/support/product/rbr860"}, {"tags": ["product", "patch"], "url": "https://www.netgear.com/support/product/rbs860"}, {"tags": ["product", "patch"], "url": "https://www.netgear.com/support/product/rbre950"}, {"tags": ["product", "patch"], "url": "https://www.netgear.com/support/product/rbse950"}, {"tags": ["product", "patch"], "url": "https://www.netgear.com/support/product/rbr750"}, {"tags": ["product", "patch"], "url": "https://www.netgear.com/support/product/rbs750"}, {"tags": ["product", "patch"], "url": "https://www.netgear.com/support/product/rbr840"}, {"tags": ["product", "patch"], "url": "https://www.netgear.com/support/product/rbs840"}, {"tags": ["vendor-advisory"], "url": "https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Devices with automatic updates enabled may already have this patch \napplied. If not, please check the firmware version and update it to the \nlatest.</p>\n\n<p>Fixed in:</p>\n\n<p></p><p><span>RBR750</span><a href=\"https://www.netgear.com/support/product/rbr750\"> firmware v7.2.8.5 or later</a><br><span>RBR840 </span><a href=\"https://www.netgear.com/support/product/rbr840\">firmware v7.2.8.5 or later</a><br><span>RBR850 </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbr850\">firmware v7.2.8.5 or later</a><br><span>RBR860 </span><a href=\"https://www.netgear.com/support/product/rbr860\">firmware v7.2.8.5 or later</a><br><span>RBS750 </span><a href=\"https://www.netgear.com/support/product/rbs750\">firmware v7.2.8.5 or later</a><br><span>RBS840 </span><a href=\"https://www.netgear.com/support/product/rbs840\">firmware v7.2.8.5 or later</a><br><span>RBS850 </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbs850\">firmware v7.2.8.5 or later</a><br><span>RBS860 </span><a href=\"https://www.netgear.com/support/product/rbs860\">firmware v7.2.8.5 or later</a><br><span>RBRE950</span><a href=\"https://www.netgear.com/support/product/rbre950\"> firmware v7.2.8.5 or later</a><br><span>RBRE960 </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbre960\">firmware v7.2.8.5 or later</a><br><span>RBSE950 </span><a href=\"https://www.netgear.com/support/product/rbse950\">firmware v7.2.8.5 or later</a><br><span>RBSE960 </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbse960\">firmware v7.2.8.5 or later</a></p><p></p>"}], "value": "Devices with automatic updates enabled may already have this patch \napplied. If not, please check the firmware version and update it to the \nlatest.\n\n\n\nFixed in:\n\n\n\n\n\nRBR750 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbr750 \nRBR840 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbr840 \nRBR850 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbr850 \nRBR860 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbr860 \nRBS750 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbs750 \nRBS840 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbs840 \nRBS850 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbs850 \nRBS860 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbs860 \nRBRE950 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbre950 \nRBRE960 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbre960 \nRBSE950 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbse950 \nRBSE960 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbse960"}], "source": {"discovery": "EXTERNAL"}, "title": "Insufficient input validation in NETGEAR Orbi routers", "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-0404", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-14T04:57:22.559440Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-26T15:04:43.482Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-0404", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-13T16:24:39.262353Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-13T16:25:05.607Z"}}], "cna": {"title": "Insufficient input validation in NETGEAR Orbi routers", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Hyunseok Yun"}], "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88 OS Command Injection"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "USER", "baseScore": 4.8, "Automatable": "NO", "attackVector": "ADJACENT", "baseSeverity": "MEDIUM", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber", "exploitMaturity": "UNREPORTED", "providerUrgency": "AMBER", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "MODERATE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "NETGEAR", "product": "RBRE960", "versions": [{"status": "affected", "version": "0", "lessThan": "v7.2.8.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBSE960", "versions": [{"status": "affected", "version": "0", "lessThan": "v7.2.8.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBR850", "versions": [{"status": "affected", "version": "0", "lessThan": "v7.2.8.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBS850", "versions": [{"status": "affected", "version": "0", "lessThan": "v7.2.8.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBR860", "versions": [{"status": "affected", "version": "0", "lessThan": "v7.2.8.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBS860", "versions": [{"status": "affected", "version": "0", "lessThan": "v7.2.8.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBRE950", "versions": [{"status": "affected", "version": "0", "lessThan": "v7.2.8.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBSE950", "versions": [{"status": "affected", "version": "0", "lessThan": "v7.2.8.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBR750", "versions": [{"status": "affected", "version": "0", "lessThan": "v7.2.8.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBS750", "versions": [{"status": "affected", "version": "0", "lessThan": "v7.2.8.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBR840", "versions": [{"status": "affected", "version": "0", "lessThan": "v7.2.8.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBS840", "versions": [{"status": "affected", "version": "0", "lessThan": "v7.2.8.5", "versionType": "custom"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Devices with automatic updates enabled may already have this patch \napplied. If not, please check the firmware version and update it to the \nlatest.\n\n\n\nFixed in:\n\n\n\n\n\nRBR750 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbr750 \nRBR840 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbr840 \nRBR850 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbr850 \nRBR860 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbr860 \nRBS750 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbs750 \nRBS840 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbs840 \nRBS850 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbs850 \nRBS860 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbs860 \nRBRE950 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbre950 \nRBRE960 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbre960 \nRBSE950 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbse950 \nRBSE960 firmware v7.2.8.5 or later https://www.netgear.com/support/product/rbse960", "supportingMedia": [{"type": "text/html", "value": "<p>Devices with automatic updates enabled may already have this patch \napplied. If not, please check the firmware version and update it to the \nlatest.</p>\n\n<p>Fixed in:</p>\n\n<p></p><p><span>RBR750</span><a href=\"https://www.netgear.com/support/product/rbr750\"> firmware v7.2.8.5 or later</a><br><span>RBR840 </span><a href=\"https://www.netgear.com/support/product/rbr840\">firmware v7.2.8.5 or later</a><br><span>RBR850 </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbr850\">firmware v7.2.8.5 or later</a><br><span>RBR860 </span><a href=\"https://www.netgear.com/support/product/rbr860\">firmware v7.2.8.5 or later</a><br><span>RBS750 </span><a href=\"https://www.netgear.com/support/product/rbs750\">firmware v7.2.8.5 or later</a><br><span>RBS840 </span><a href=\"https://www.netgear.com/support/product/rbs840\">firmware v7.2.8.5 or later</a><br><span>RBS850 </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbs850\">firmware v7.2.8.5 or later</a><br><span>RBS860 </span><a href=\"https://www.netgear.com/support/product/rbs860\">firmware v7.2.8.5 or later</a><br><span>RBRE950</span><a href=\"https://www.netgear.com/support/product/rbre950\"> firmware v7.2.8.5 or later</a><br><span>RBRE960 </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbre960\">firmware v7.2.8.5 or later</a><br><span>RBSE950 </span><a href=\"https://www.netgear.com/support/product/rbse950\">firmware v7.2.8.5 or later</a><br><span>RBSE960 </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbse960\">firmware v7.2.8.5 or later</a></p><p></p>", "base64": false}]}], "datePublic": "2026-01-13T16:00:00.000Z", "references": [{"url": "https://www.netgear.com/support/product/rbre960", "tags": ["patch", "product"]}, {"url": "https://www.netgear.com/support/product/rbse960", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbr850", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbs850", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbr860", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbs860", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbre950", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbse950", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbr750", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbs750", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbr840", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbs840", "tags": ["product", "patch"]}, {"url": "https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "An insufficient input validation vulnerability in NETGEAR Orbi devices' \nDHCPv6 functionality\u00a0allows network adjacent attackers authenticated \nover\u00a0WiFi or on LAN\u00a0to execute OS command injections on the router. \nDHCPv6 is not enabled by default.", "supportingMedia": [{"type": "text/html", "value": "<p>An insufficient input validation vulnerability in NETGEAR Orbi devices' \nDHCPv6 functionality&nbsp;allows network adjacent attackers authenticated \nover&nbsp;WiFi or on LAN&nbsp;to execute OS command injections on the router. \nDHCPv6 is not enabled by default.</p><p></p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbre960:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbse960:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbr850:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbs850:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbr860:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbs860:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbre950:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbse950:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbr750:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbs750:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbr840:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbs840:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "v7.2.8.5", "versionStartIncluding": "0"}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "a2826606-91e7-4eb6-899e-8484bd4575d5", "shortName": "NETGEAR", "dateUpdated": "2026-01-13T16:22:30.971Z"}}}, "cveMetadata": {"cveId": "CVE-2026-0404", "state": "PUBLISHED", "dateUpdated": "2026-01-14T04:57:21.815Z", "dateReserved": "2025-12-03T04:16:10.186Z", "assignerOrgId": "a2826606-91e7-4eb6-899e-8484bd4575d5", "datePublished": "2026-01-13T16:01:14.944Z", "assignerShortName": "NETGEAR"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "RBRE960", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBSE960", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBR850", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBS850", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBR860", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBS860", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBRE950", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBSE950", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBR750", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBS750", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBR840", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBS840", "vendor": "NETGEAR", "versions": [{"lessThan": "v7.2.8.5", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "a2826606-91e7-4eb6-899e-8484bd4575d5"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0D73C133-BD68-4532-B267-61796ECB1A07", "versionEndExcluding": "7.2.8.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*", "matchCriteriaId": "C13F5C69-FA9B-472A-9036-0C2967BDCDE9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rbr840_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9C730F75-337C-44C5-9DE7-E532D7C3C8BC", "versionEndExcluding": "7.2.8.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbr840:-:*:*:*:*:*:*:*", "matchCriteriaId": "4489CB05-A1C0-408C-8D8C-56EE98CA20E8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7E5B3B94-CC3D-4CFC-9FE2-9EF5CEBD4B1A", "versionEndExcluding": "7.2.8.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*", "matchCriteriaId": "D92E4C8E-222A-476C-8273-F7171FC61F0B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rbr860_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "659D5BE0-C045-48FD-9214-B35D408AF0BA", "versionEndExcluding": "7.2.8.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbr860:-:*:*:*:*:*:*:*", "matchCriteriaId": "928FC2C1-4D05-495B-ACD8-1D013EB18EE6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0821D003-6E44-46DB-B3D1-2CA553483036", "versionEndExcluding": "7.2.8.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*", "matchCriteriaId": "B529194C-C440-4BC3-850F-0613FC548F86", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rbs840_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A19A26FE-6D83-45F3-A852-FCD9F6E9F3D4", "versionEndExcluding": "7.2.8.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbs840:-:*:*:*:*:*:*:*", "matchCriteriaId": "84AEA27B-8BEA-4E83-819A-FDAC1881928F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "79468E3C-C58C-4076-BB85-4C331BCC300C", "versionEndExcluding": "7.2.8.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*", "matchCriteriaId": "221CA950-E984-44CD-9E1B-3AADE3CEBE52", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rbs860_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4D8CED97-AA9C-4655-B521-319021F1F9DB", "versionEndExcluding": "7.2.8.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbs860:-:*:*:*:*:*:*:*", "matchCriteriaId": "E6630553-D726-4524-8BD2-3EE839DE6676", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rbre950_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "08EA0CCC-1FAD-47D3-B70E-1991AE30C12E", "versionEndExcluding": "7.2.8.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbre950:-:*:*:*:*:*:*:*", "matchCriteriaId": "848E7D41-EB61-4AB3-9AED-8E35281DB464", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rbre960_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C22E56DA-E0B9-4A24-B818-F7919B8CDB5C", "versionEndExcluding": "7.2.8.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbre960:-:*:*:*:*:*:*:*", "matchCriteriaId": "314FF95E-5A0C-4A6B-B8D6-28546F2C1A12", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rbse950_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E26EAB17-7904-4325-A21D-43B807F7DB56", "versionEndExcluding": "7.2.8.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbse950:-:*:*:*:*:*:*:*", "matchCriteriaId": "32A3F32B-B05E-42C6-969A-0F4DD5B7942E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netgear:rbse960_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "19048F97-E226-4287-A206-9006F7B91E21", "versionEndExcluding": "7.2.8.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netgear:rbse960:-:*:*:*:*:*:*:*", "matchCriteriaId": "419AF785-61C6-4911-A170-6A06D7991948", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An insufficient input validation vulnerability in NETGEAR Orbi devices' \nDHCPv6 functionality\u00a0allows network adjacent attackers authenticated \nover\u00a0WiFi or on LAN\u00a0to execute OS command injections on the router. \nDHCPv6 is not enabled by default."}, {"lang": "es", "value": "Una vulnerabilidad de validaci\u00f3n de entrada insuficiente en la funcionalidad DHCPv6 de los dispositivos NETGEAR Orbi permite a atacantes adyacentes a la red, autenticados a trav\u00e9s de WiFi o en la LAN, ejecutar inyecciones de comandos del sistema operativo en el router. DHCPv6 no est\u00e1 habilitado por defecto."}], "id": "CVE-2026-0404", "lastModified": "2026-06-17T10:10:45.530", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NO", "Recovery": "USER", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "ADJACENT", "availabilityRequirement": "NOT_DEFINED", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "UNREPORTED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "AMBER", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "MODERATE"}, "source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0404", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-01-14T04:57:22.559440Z", "version": "2.0.3"}}]}, "published": "2026-01-13T16:16:10.343", "references": [{"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Vendor Advisory"], "url": "https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Product"], "url": "https://www.netgear.com/support/product/rbr750"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Product"], "url": "https://www.netgear.com/support/product/rbr840"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Product"], "url": "https://www.netgear.com/support/product/rbr850"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Product"], "url": "https://www.netgear.com/support/product/rbr860"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Product"], "url": "https://www.netgear.com/support/product/rbre950"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Product"], "url": "https://www.netgear.com/support/product/rbre960"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Product"], "url": "https://www.netgear.com/support/product/rbs750"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Product"], "url": "https://www.netgear.com/support/product/rbs840"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Product"], "url": "https://www.netgear.com/support/product/rbs850"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Product"], "url": "https://www.netgear.com/support/product/rbs860"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Product"], "url": "https://www.netgear.com/support/product/rbse950"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "tags": ["Patch", "Product"], "url": "https://www.netgear.com/support/product/rbse960"}], "sourceIdentifier": "a2826606-91e7-4eb6-899e-8484bd4575d5", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T06:44:35.063688+00:00", "value": {"mitigation_remediation": ["Update all Orbi routers to firmware v7.2.8.5 or later; the new firmware is listed in the official Netgear advisory and can be downloaded from each device\u2019s support page.", "Ensure automatic firmware updates are enabled so that future security patches are applied without manual intervention.", "If a firmware upgrade cannot be performed immediately, disable the DHCPv6 feature on the router to remove the vulnerable code path, or isolate the router on a segregated management network to mitigate local\u2011network attacks."], "summary": {"action": "Apply Firmware Update", "impact": "OS Command Injection on Router"}, "threat_synthesis": {"affected_systems": "The flaw affects NETGEAR Orbi line devices including RBR750, RBR840, RBR850, RBR860, RBS750, RBS840, RBS850, RBS860, RBRE950, RBRE960, RBSE950, and RBSE960. Firmware versions earlier than v7.2.8.5 are vulnerable; all models have a patch in firmware v7.2.8.5 or newer.", "description_and_impact": "An insufficient input validation flaw in the DHCPv6 handling of NETGEAR Orbi routers allows authenticated attackers on WiFi or LAN to inject and execute operating\u2011system commands on the device. The vulnerability is a classic case of CWE\u201120, where user input is not properly sanitized before being passed to the underlying shell. Successful exploitation would give the attacker control over the router, enabling lateral movement, traffic interception, or denial of service for connected devices.", "risk_and_exploitability": "The CVSS score of 4.8 categorizes the issue as a moderate risk, while the EPSS score of less than 1% indicates a low probability of exploitation in the wild. The vulnerability is not listed in CISA\u2019s KEV catalog, suggesting no publicly known active exploits. Attackers must be locally or WiFi\u2011authenticated and the DHCPv6 feature must be enabled, which is not the default setting, further limiting the attack surface."}}}}, "created": "2026-04-18T06:45:23.970197+00:00", "updated": "2026-04-18T06:45:23.970207+00:00", "vendors": []}