Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2026-0415

Insufficient input validation vulnerability in certain Orbi routers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NETGEAR

Description

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NETGEAR RBE970

Default version status: unaffected

  • 0 to < V9.12.4.9affected

NETGEAR RBR750

Default version status: unaffected

  • 0 to < V7.2.8.5affected

NETGEAR RBR840

Default version status: unaffected

  • 0 to < V7.2.8.5affected

NETGEAR RBR850

Default version status: unaffected

  • 0 to < V7.2.8.5affected

NETGEAR RBR860

Default version status: unaffected

  • 0 to < V7.2.8.5affected

NETGEAR RBRE950

Default version status: unaffected

  • 0 to < V7.2.8.5affected

NETGEAR RBRE960

Default version status: unaffected

  • 0 to < V7.2.8.5affected

NETGEAR RBS750

Default version status: unaffected

  • 0 to < V7.2.8.5affected

NETGEAR RBS840

Default version status: unaffected

  • 0 to < V7.2.8.5affected

NETGEAR RBS850

Default version status: unaffected

  • 0 to < V7.2.8.5affected

NETGEAR RBS860

Default version status: unaffected

  • 0 to < V7.2.8.5affected

NETGEAR RBSE950

Default version status: unaffected

  • 0 to < V7.2.8.5affected

NETGEAR RBSE960

Default version status: unaffected

  • 0 to < V7.2.8.5affected

References